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FOREWORD 



The Ocatntdttee on Human Factors was established in October 1980 by the 
Oamndssion on Behavioiral and Social Sciences and Education of the 
National Research Council. It is sponsored by the Office of Naval 
Research, the Air Force Office of Scientific Research, the Array 
Research Institute for the Behavioral and Social Sciences, the National 
Aeronaiitics and Space Administration, and the National Science 
Foundation. 

The principal objectives of the ccsnmittee are to provide new 
perspectives on theoretical and methodological issues, identify basic 
research needed to e)5>and and strengthen the scientific basis of human 
factors, and to attract scientists both inside and outside the field to 
perform needed research. The goal of the caratiittee is to provide a 
solid foundation of research on which effective human factors practices 
can build. 

In order for the committee to perfonn its role effectively, it draws 
on experts from a wide range of scientific and engineering 
disciplines. Ihe committee includes specialists in the fields of 
psychology, engineering, biomechanics, cognitive sciences, machine 
intelligence, conpiter sciences, sociology, ard human factors 
engineering. Participants in the working groups, workshops, and 
symposia organized by the coomnittee represent additional disciplines. 
All of these disciplines contribute to the basic data, theory, and 
methods required to inprcve the scientific basis of human factors. 



vii 
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A steering grocp formed by the Ocaranittee on Human Factors was charged 
to identify the types of human factors research that, if funded and 
begun imniediately, would be likely to produce results applicable to the 
evolutionary design of a National Aeronautics and Space ^\dministration 
national space station to be launched in the 1990s. The steering group 
was instructed to consider human factors research relevant to such 
future space systems as the space station, lunar bases, and possibly 
interplanetary travel. Ihe synposium, vMch was planned by the 
steering grajp and is reported in these proceedings, did indeed yield 
information applicable to future space systems. In addition, it 
provided information and offered iiisi^ts of potential interest to many 
other civilian and military endeavors. It was our hope that this 
potential for transfer would occur. 

I would lite to thank the participants in this project for their 
time, effort, and cQntriLjtions to the synposium. Individual authors 
acc^]t primary ^.esponslbility for each paper and this authorsh?? is 
ackncwledged at the beginning of each paper* Steering cfroap numbers 
deliberated, reviewed, and contributed to inprovements jji the content 
of each paper. I am especially grateful to them fo^ their generous 
contribution of time both before and after the syirposium. 

Ihe steering grocqp, and the other principals in the production of 
this synposium, received a great deal of guidance and assistance from 
NASA personiiel. On behalf of us all, I would like to thank Melvin 
Montemerlo and Michael McGreevy of the Office of Aeronautics and Space 
Technology, Richard Carlisle and Bryant Cramer of the Space Station 
Office, and Owen Garriott, astronaut, for their extensive summaries of 
the space station plannii>g activities during the initial October 1985 
steering groip briefings. Special thanks are also due to Jesse Ifoore, 
the director of the Johnson Space Center, Joseph loftus, assistant 
director, David Nagel from the Ames Research Center, and the many NASA 
personnel who participated in the briefings of the steering committee 
held at the Johnson Space center. 

Finally, thanks are due to the people who have worked behind the 
scenes to ensure that the synposium was conducted, and the proceedings 
pr^)ared, in an organized and timely manner. J^reciation is extended 
to Stanley E)eutsch, stucty director at the tiine of the synposium, for 
his contributions to its planning; to Dana Kruser, project coorxlinator. 
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for her efforts In the organization and execution of the svmDosiim an^ 
assx^tance in the editing of this r^rt; to ElizaSth^eS^ 
r^earxii assistant for her aanagerS and logistiTS^^ Beverlv 

Sir5^1?^f?^^^^J^¥f° to Oiristi^S^n? 

Ocraniraion staff, for editorial support; to Margaret Chentr. vdio 

^f^^ assistance iiiWratir^Sir^,c^Sn; to 
Marian Hbltzthum, for secretarial assistance in preparim^^AJ^n^- 

S'^^l^f ^ Of these individuals 
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Ocffnmittee on Human Factors 
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SYMPOSIUM SUMMARY 



We can follow our dreams to distant stars, living and working in 
space for peaceful economic and scientific gain. Toni^t, I ain 
directing NASA to develop a permanently manned Space Station and 
to do it within a decade. 

President Ronald Reagan, State of the Union Message, 
January 5, 1984. 



In response to this presidential mandate, the National Aeronautics and 
Space Administration (NASA) is planning to launch a national space 
station in the early 1990s. To inoplement this omiitinent, and in 
concurrence with a congressional mandate, NASA is focusing serious 
attention on the use of automation and robotics in future space 
systems. 

There is a tendency, particularly in the public sector, to view the 
emergence of new conputer capabilities and automation and robotic 
technologies as a basis for replacing humans in space and thereby 
avoiding tragedies such as those of the Apollo 7 and the Qiallenger. 
However, it is unlikely that artificial intelligence conparable to 
human intelligence will be available to replace humans during the last 
part of the twentieth Century and the early part of the twenty-first. 
Therefore, people and automated systems will work together in space for 
the foreseeable future. 

NASA is plannii^ new research programs amed at acquiring a better 
understanding of how cotrputers, automation, and robotics can be made to 
work in partnership with people in coirplex, long-duration space system 
missions. Ihese programs will address important questions concerning 
the relationship between vfliat are called intelligent systems and the 
people \iho will use them as astronauts inside a space vehicle and in 
extravehicular activities, as scientists emd technicians in space and 
on tha ground, and as controllers on the ground. 

Space offers significant challenges for the exploration and 
denonstration of human-conputer-rbbot cooperation. Recognizing the 
size, conplexilY/ and iirportance of this challenge, the Aeronautics and 
Space Technology Office approached the Ccaiamittee on Human Factors for 
assistance. The specific question posed was '»What research is, or 
should be, going on now that might produce new technolcpgies that could, 
or should be, integrated into the space station after its initial 
operating capacity has been established?" The cxsmmittee respcpnded to 
NASA's question by proposing to assemble a groi:p of eminent scientists 



toac^r^ this issue and to present its views to the research 

a syitEosium on human factors research needs in 
aovanoed space station design. 

DBVEIDrMENT OF THE SYMPCSItJM 

^^O^ttee on Human Factors initially formed a small Steerim Groim 
c^gedof SIX researchers r^aresentii^ a broad range of relS^t^ 
SSSS^ ^ factors, artificial intelligence, ej^^ert 

systems, decision science, rcfcotics and telepresence, and s^E^ 

S^'Sc'S^tSSS^'?^^- ^-^S^^SSSucedto 
S?.-2r ^ ^ throu^ briefings from various NftSA headquarters 
offi«s, including the Office of Aeronautics and Space ItedSoW and 

Si?Se?SS°"tS''S"- ^ informtirSt^'^SLT 

th^e^efings, the steering graqp then developed the followim list 

o^^ium tc^ics and questions for consideration by pS^^ve 

® System Productivity/PPnple and Madhir.pg 

— Hew can human performance and productivity be defined' 
« ^^^^ productivity be measure and evaluated? 

• Expert Systems and Rohrrf-ics and ihf^Ay ttq^ 

— What are the requirements for reliability? 

"~ ^taS^S?^^' systems, and rdbot^ form an effective 

• I^^qe and Dis p l ays for H.Tm an-CQmpirt-.Pr> rn mmunicahinn 
~~ structure does a ccanputer language need? 

What types of displays are most effective? 
® Telepresence and SupP tvisory Cnni-mi 

— What are the relative merits of various telepresence 
displays? (e.g. , touch or stereopsis) 

^ ^ ^ iiTcrease the precision of control for 
remote manipulators? 
® Camp"te^>Aided Manitnrincf and DeniRinn vi^v^r^ 

— What types of routine operations could be automated? 
How will people use these types of aids' 

• Social Fachnrg 

S?^ °f increased crew diversity 

with respect to such variables as gender, professional 
training, and interest differences' 

• Human Role in Space 

" ^t^f"^ ^ ^l°^ted in manned space 

~ Who or vdiat instrumentality should take ultimate 

responsibility for system performance and safety, a human 
or a conputer? >-""<="i 
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Ihe g&nerol framework for the syitposivnn was planned as follows. 
Each topic area would constitute a different session. Each session 
would consist of two fontal presentations of papers prepared especially 
for the synposium and would be followed by a formal contrnentary on the 
papers by a preassigned discussant and would conclude with an open 
discussion. Members of the audience would be active participants and 
would be selected with this in mind. 

The steering groi^) identified and recruited three e>q?erts in each 
topic area: two authors and a designated discussant. The session on 
system productivity was an exception, having one author and one 
discussant. Before the syitposium, all the prospective authors and 
discussants were invited to visit the Lyndon Johnson Space Center for 
briefings and discussions with key personnel involved in manned space 
fli^t research and development. Speakers and advisors were present 
from NASA headquarters, the Johnson Space Center, the Ames Research 
Center, and the Jet Propulsion laboratory. 

Following the extensive overview of NASA research efforts aimed at 
the space station effort provided by NASA personnel, syitposium authors 
and discussants began preparing materials for the syitposium. 
Individuals involved in each session worked together using an iterative 
peer review and revision approach in writing the papers and the formal 
comnaentary on them that was to be inclvided in the symposium 
proceedings. Each group took responsibility for the completeness and 
technical accuracy of the material representing its area of e^qjertise. 
Prior to the syitposium, authors and discussants received a complete set 
of papers and commentary for each of the sessions. 

Ihe syirposivim was held at the Nationa]. Academy of Sciences on 
January 29-30, 1987. Follcwing the syirposivmi, authors were asked to 
revise their papers and to suggest revisions to papers written by 
others based on the information and insists gained during the 
symposium. 

The steering group did not consider its mandate to encompass the 
task of developing specific research recommendations for NASA. The 
syitposium presentations and commentary serve that purpose. However, 
the closing remarks of the keynote speaker and the chair, vMch appear 
at the end of these proceedings, stand as their personal interpretation 
of what was said that was the most important. 



SYMPOSIUM ABSTE^CIS 

This section summarizes the contents of each of the symposium papers 
and provides the interested reader with an overview of the synposixmii 
program. 

System Productivity: People and Machines 

Productivity in the Space Station (Raymond S. Nickerson) The concept 
of producrtivity, vMle elusive, has been an iirportant one in economics 
and engineering psychology and is frequently encountered in discussions 
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program and of the space station in particular. Nickerson 
begins with a discussion of v^t prcxJuctivity means and how it has been 
assess^in earth environ^^ Several variables that have been shown 
^ ^S^it are Identified. Factors that are lately to have an impact 
ai productivity an space are discussed, with enphasis on a variety ^ 
stressors that may be ejqjected to characterize the space station 
enviromnQnt. The paper ends with a set of recommendations for 
research. 



Ejqjert Systems and Their Use 

ai Systems in the Space Station CVhrm^ s M. Mitchell^ Among the 

help shape life in the space station, artificial 

^i^Sii^r^^^SJ^ ""^""^ ^ Pl^y ^ "«3or role. The striking 

ccaipleaty of the station, its life si^rt systems, and the 
manufacturing and scientific apparatus it will house require that a 
good share of its si^servision, maintenance, and control be done bv 
oc5ip±er. At the same time, the need for intelligent communication and 

^nJ^^^^^."^^ ^''^^^ and^^JSSiSr 
residents poses a serious challenge to present interfaces between 

?S ?tT^ jachanes. Hence, the potential and need for contributions 
frm AI to the space station effort are great. 

"^ilS^ suggests areas in vMch support for new AI research mirfit 
be e>5)ectai to produce a significant iitpact on future spaSlSSon 
tecimology. The paper focuses on two ar^as of particular significance 
to tiie space effort: (i) the use of know! «age-tesed systems for 
monitoring and controlling the space station and (2) issues related to 
S jSiSSf"""^ responsibility between c^iters a^ '° 



gxpert Systems; Applications in Snar e f Bruce c. Pa^rh^r^^r.) i^e 
t^inology of artificial intelligence (AI), specifically exp^ 
systems, is reviewed to examine vdiat capabilities exist ar3^t 
SSn^^ ^ corseted to facilitate the integration of humans 

^a^l^^ lLZ^^^"^^^^^' ^ system is defined 

'uS^i^f reasoning program that uses heuristics to 
manipulate ^rmbolic data in order to generate plausible answers to 
questions. Four goals are identified for ej^jert systems: (1) 
performance (at a standard conparable to the best specialists) ; (2) 
reasoning (as opposed to strai^t "number crrmching") ; (3) 
^I^S^^^^^^ (the ability to ej^lain ;^y an answer is plausible 
and how It was generated) ; and (4) flexibility (the ability to deal 
xvith novel situations) . Methodological techniques for achieving these 
Si,?f ^SfT^^ including modularity (teeping domain knowledge 
sep^te from decision rules, and independent clusters of domain 

°S !! separate from one another) and uniformity of language and 
c^Tstructs (both internally between segments of the progr^, Li 
externaljy betv/een the program and the intended users) . The problems 
of collecting, representing, storing, maintaining, and manipulating 




domain knowledge are revie^ved. Buchanan concludes that existing e>qpert 
system technology is adequate for scane problems but can be iirproved to 
vise the very large kiKwledge bases required by a system as cortplex as 
the space station. 



Lsaiguage and Displays for HumanHjonpater Cfconranunication 

Chancre in Human-^fcanputer Interfaces on the Space Station (Hiilip J, 
Hayes) Ihe planned longevity of the space station will require 
modularilY in its design to allow conponents to be changed and vpdated 
as independently of one aiK>ther as possible. This paper e>?)lores the 
issue of modularity in the design of huonaan-ccarpiter interfaces for the 
space station, liie need for naodularity centers on the rapid rate of 
e}5)ansion in the kinds and ocopobinations of modalities (typing, 
graphics, pointing, speech, etc.) available for h\aman-<x3rrputer 
interaction, and on the techniques available to effect their 
iitplementation and interaction. Ihe paper assesses the appropriateness 
of current and f orthocaodng modalities according to task, user, and 
space station environment. A secondary factor that makes change in 
human-conpiter interfaces irritable for the space station is the 
developoftent of intelligent interfaces. The paper discusses itethods of 
achieving intelligence in interfaces and in v4iat circunstances it is 
desirable. Ihe question of hew to achieve the necessary changes in 
human-ccBPoputer interfaces is considered, focusing on methods of 
obtaining a clean separation between the interface and the vmderlying 
space station system application. User interface management systems 
and interaction interface development environments are also addressed. 
The paper concludes with a set of research reccanmendations covering 
both research into new interface technology and methods for dealing 
with the consequent need for change in interfaces. 



Cognitive Factors in the Design ajnd Development of Software in the 
Space Station fPeter G. Pplson) The paper describes major problems in 
the design of hiiman-<xsipiter interfaces for systems on the space 
station and shows how systematic application of enpirical and 
theoretical results and methodologies frcm cognitive psychology and 
cognitive science can lead to the develcpDaent of interfaces that reduce 
trainir^ cost and enhance space station crew productivity. The paper 
focuses on four i^ues: (1) transfer of xaser skills; (2) ocafiprehension 
of ccarplex visual displays; (3) human-ccaipiter problem solving; and (4) 
mariagement of the develcpnent of usable systems. Pour solutions to the 
problems are proposed: (1) use of information processing itvodels of 
tasks in the design process; (2) allocation of adequate resources to 
user^interface development; (3) use of user interface management 
systems; and (4) use of existing expertise in NASA. 
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OcaIlput:e:^-Aided Mbnitcaring and Decision Making 

gfcustness and Trani^rPncv in Intelli gent Systems rRanc3all mv^•c;^ 
Buudang and operating a manned space station will give rise to 
pr^lems of enormous ccmplexity in an environment that is both hostile 
and unfamiliar. The catplexity of the station and the novelty of the 
^rv^OTment preclude i±B creation of an erfiaustive list of contingencv 
procedures. Uhforesean events will inevitably occur, requiring 
real-tune interpretation, diagnosis, ard response. 

=>„^ Paper reviews the failure of a fUel cell during the second space 
shuttle mission m order to give an example of the kiSd of 
unanticipated event that can occur and examines the varieties of 
knowledge and engineering reasoning required to deal with such an 
event. Davis considers vhat mi^t be required to have a conpiter 
SiS "^o task giving it an understanding of "how something 
vrorks". Some nonsolutions to the problem are discussed to demonstSate 
^ ^i^^t^ology is insufficient, and severBl^sSrTSS 
are then ejqjlored. The nature and character of engineering models are 
S^Sv ?^.f^ ^ suggested that their creatiS? seleSior^S 
S^5i2 2 if^^ ^ °f understanding th4t should 

be crated. Recalling the difficulties involved in the cSpture of 
Solar Max, the paper argues for the necessity of coitplete desiqn 
"^S^ and speculates about ;^t it would take to create a desiqn 
c^ture system so effective that it would be was almost unthinkable to 
^te or modi^ a design without it. Ihe paper also considers vhat 
c^ be done at the design stage to create models that are easier to use 
and more effective; that is, how to design in such a fashion that 
interpretation, diagnosis, and response are made less camolex 
processes. ^ 



Decision Making-Aided and Unaided rR^nin h Fischhoff^ ihere are few 
aspects of space ^tion design and operation that do not involve some 
decision making, v^ether it be choosing critical pieces of ^me^ 
dioosing to trust automated systems, choosing v*i^ to looklS^oi 
the source of an apparent anomaly, or:,choosing the range of conditions 
for pre-mission testing. Knowing hc^' people intuiti^y makf ^ 

J'^i^f / determining vAiere they rLd help, in the 

form of automated decision aids, specialized training, or desi^ that 
are robust in the face of fallilDle decision making. Mthourfi iThaf 
much in cotranon with decision making in other contexts, space stetion 
decision making presente seme special demands, ihese include: fi) the 
n^ to create a shared model of the space station and ite support 
SSS^' ;f^2J2-^ coordinate the widely distributed decisionlnakers 
S?f -IfJpjS^i!?^ performance; (2) the need to make decisions 
J^'!S^<. "^""^ ^ future behavior are 

incoitpletely understood; (3) the need to make novel decisions, 
^"^^^^^ ^ nonroutine situations, ihe human factors research needs 
in eadi of these areas are identified, using as a point of departure 
the literature of behavioral decision theory. Meeting these danands 
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will reqiiire the sort of progirainmatic research effort that has 
distir^uished NASA in the past. 



Tel^resence ar)d Si:5)ervisory Control 

Teleoperation, Telepresence- aid Telerdbotics (Uticmas B. Sheridan) The 
problems of integrating hiuaans and autcanated or robotic systems in 
space environments are discussed, beginning with brief definitions of 
Icey tenns like teleqperation, telepresence, telerdbotics, and 
sipervisory control. The early develcpnent of teleqperators is 
summarized, from the crude mechanical earth-mcving and constjcuction 
equipaent available prior to 1945, to the industrial robots, equipped 
with primitive cait5pucer vision, wrist force sensing, and "teach 
pendant" control boxes that were in xise by the early 1980s. Ihe 
current status of teleoperator development is evaluated^ and 
multifingered manipulators, touch sensing, and depth perception are 
cited as areas in which promising research is occurring. A need is 
identified for a formal theory of manipulation to guide the development 
of human-machine integrated sensory-motor control systems. Research 
needs are identified in the following areas: (1) telesensing 
(inclxiding resolved force, touch, kinesthesis, proprioception, and 
proximity) ; (2) teleactuating (including multi-degree-of-freedom end 
effectors, two-arm interaction, and multiperson cooperative control of 
teleoperators) ; (3) hiaman-ccaiputer interaction in a computer-aided 
environment (including siinulation, planning/decision-aiding, and 
ccQODmancVcomraunicatioiv'control) . it is conclxided that research in the 
areas discussed is critical for the development of 
teleoperator/telerdbotic capabilities, vMch will permit the best 
relative i:ise of both hvman and machine resources in future space 
systems. 



Teleicdbotics for the Evolving Space Station flawrence Stark) In this 
paper, telerobotics is xased to mean remote control of robots by a human 
operator using si:?)ervisory and some direct control. By robot is meant 
a manipulator/mobility device with visual or other senses. This is an 
iirportant area for the evolving N2^ space station. The paper suggests 
that triplicate or three way planning should be employed. It is 
inportant to carry out research to accomplish tasks: (i) with people 
ciloi^, if possible, such as in extra-vehicular activities; (2) with 
autonamous robots (AR) ; and (3) with telerdbotics. By cortparing and 
contrasting the research necessary to carry out these three approaches, 
present problems may be clarified. 

The paper describes an esqperiinental telerdbotics simulation suitable 
for stuctying himan operator perforroance. Siitple manipulator 
pick-and-place a>vi -cracking tasks allcwed quantitative catparison of a 
number of calligraphic display viewing conditions. Ihe Ames-Berkeley 
enhanced perspective display was xitilized in conjunction with an 
e3q5erimental helioet mcfunted display system. A number of control modes 
could be carpared in this telerdbotics similation, including 
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displacaaent, rate, and acx»leratory control using position and force 
jc/stidcs. Ccratomication delay was introduced to stud/ its effect on 
perfontanoe. 

Ihe paper suggests that the impetus and sv^port for telerobotics 
research technology should come f ran and from private industry and 
that such research could also be conducted, with siroort from NASA, in 
universi-ly laboratories. 

Social Factors in Productivity and Performance 

Social Stress, Ocatimter-Medi a ted Oanmunication Systems, and Himwn 
Productiv ity in Space Stations ^Karen S. Cook^ The paper has two 
distinct but related foci. First, it considers the issue of stress and 
reviews the social psychological literature relating stress to 
individual and graap fUnctionij^. Primary attention is focaased on the 
link tetween stress and groi?> productivity. Ihe paper identifies 
prcanising lines of research in the social sciences and poses issues 
that mi^t be of particular interest to NaSA for future research. 
Second, the paper considers a broad class of problems that arise from 
the fact that life aloft requires, almost exclusively, mediated 
oomraunication systems. Biis section of the paper addresses the 
psychological and social aspects of mediated comraunication (primarily, 
cyiter-mediated ccanmunicaUon systems) and its iirpact on individual 
and group performance or productivity. Bie concluding section of the 
paper prqposes a critical set of research needs that NASA midit takB as 
reccmnendations for prograinmaUc research. Ihese ccmplement research 
currently being started by NASA's Human Factors Division. Emphasis 
IS placed on what are termed criUcal social contingencies, namely, 
those psychological and sociological aspects of life as envisioned on 
space stations that, if not managed well organizationally, could create 
major prcblems for crew productivity and viability in space. 

Control, Conflict, and Crisis M ^aement in the Space Station's Social 
. Systan (H. Andrew Michener) The paper discusses two social systems: 
(1) the space station social system in the year 1993 and (2) the space 
station social system as it may have evolved by the year 2000.. Because 
neither of these social systems exists today, they cannot be 
investigated by empirical techniques; thus, the discussion in this 
paper is necessarily theoretical and conjectural. It is proposed that 
the year 2000 social systan, in contrast with the 1993 system, will be 
larger in size and more differentiated in composition, will mate 
greater use of on-board computerization (artificial intelligence) , and 
will pursue different goals and subgoals. These changes will, in turn 
create a year 2000 social system that is more complex, more ' 
differentiated into subgroi?)s, and more decentralized with regard to 
decision making than the year 1993 system. It. is suggested that 
several consequences will follow from increases in complexity, 
differentiation, and decentralization. Specifically, it is likely 
that: (1) the si^jervisory-control system on board the space station 
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will shift from a hierarcMcal form to a heterarcbical fom; (2) the 
potential for, axid severity of, interpersonal conflict will be greater; 
and (3) the logistics of responding to crises will be different. Each 
of these points is discussed in de*->ail* Ihe paper closes with 
suggestions regardir^ res^^rrh that mi^t visefully be conducted today 
in anticipation of these changes. 



Bie Human Role in Space Systems 

The Roles of Humans and Machines in Sp ace roavid L. Akin) Ihe 
fundamental requirements for any self-oontcdried device performing a 
useful function in space are identified as follows: (1) sensation (the 
ability to detect objects) ; (2) coiiputation (the ability to formulate a 
plan of action) ; (3) manipulation (the ability to interact with, and to 
alter, the environment) ; (4) loocanotion (the ability to maneuver within 
tile environment); (5) si^jport (power, cooling, etc.)* Ihe past and 
present roles of human and mechanical systems in fulfilling these 
Sanctions in space activities are reviewed, with emphasis on the 
special contributions of people to the performance of space systems* 
Ihe need to taJce an earthlike environment into space in order to 
accommodate humans is also discussed, includirg the constraints of 
atmos0iere, consumables, voltmie, work cycles, and gravity, it is 
concliaded that there will continue to be necessary and sufficient roles 
for both humans and machines in space systems for the foreseeable 
future* Research needs are identified in the following areas: (1) 
developnent of a meaningful data base on hman and machine capabilities 
and limitations in space environments; (2) identification of 
appropriate roles for humans and machir^ in space systems; (3) 
develcpnent of appropriate metrics of human and machine performance; 
and (4) an assessment of anthropocentrism (the tendency to design 
autoncQDous machines based on a human model) • 



Sharing Qxmitive Tasks Between People and Ocmiputers in Space Systems 
(William H> Starbucks Ihe differejrx^es between people and coitputers are 
persistent and profound. Althou^ oomptters* capabilities have been 
developing rapidly, corrputer simulation of human thought has had litUe 
success* However, the differerK^ between people and coarputers suggest 
that combinations of the two can achiv«ve results beyond the 
capabilities of each alone* For that reason. NASA should devote 
research to improving the interactions and synergies between people and 
conoputers. 

Nearly all the research on human-^xsipiter interaction has focused on 
people v*io lacked thorou^ training and \*io had little experience with 
ccaiputers. Since most of these findings may not esctrapolate to the 
well-trained and e'^perienced operators of space systems, there is need 
for studies of such users* Five research tcpics seem especially 
interesting and iinportant: (1) fostering trust be^-ween people and 
expert systems; (2) creatJj^ useful workloads; (3) anticipating human 
errors; (4) developii^ effective interface lar^uages; and (5) using 
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Meaningful interface metaphors. Inherent in these topics is an 
iaplication that NASA shcjuld develop a user interface management system 
that will recognize the needs of different lasers, allow different users 
to es^jress their personal preferences, and prefect users' 
individuality. The paper concludes that to iitprove the qualily of 
designs and to iitpxive users' acceptance of designs, ejsperienced 
astronauts and ccaTtrollers should participate in the designing of 
interfaces and systems. 
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OPENING SESSION 



WEEOCME 



Ihamas E. Sheridan 



Welccsne to the Synposium on Human Factors in Aatomated and Robotic 
Space Systems. I wlTI start by saying a few wortJs about vAiy we're all 
here. A bit over a year ago, actually before the Challenger accident, 
Melvin Montemerlo, the Manager of the Human Factors Research Prcgram 
and Oo^lanager of the Autcanation and Robotics Program for the office of 
Aeronautics and Space Technology in NASA Headquarters, requested the 
ccsnmittee on Human Factors of the National Research Council to consider 
the needs for human factors research in evolutionary manned space 
stations. Mel asked the ccsnmittee to look at future manned space 
systems beyond the Initial Operating Configuration (lOC) ; looking ahead 
into the late 1990s and beyond. (I mi^t mention that Miel is on 
sabbatical leave and Mike MoGreevy is currently managii>g the programs.) 

It was clear to us that any new research started now could not have 
much effect on the design of the IOC, so we knew we had to speculate 
for a period beyond this first space station. It was also clear to us, 
as we thou^t about it, that if a single issue could be considered to 
have the most effect on human factors in the space program, it would be 
the ccarputer. And vMle much of the public, even the Cor^ress, and 
even scares in NASA management, have ccjne to think in terms of the 
astronaut versus the catpiter and autcanation and robotics, I believe 
the science and technology community and many in NASA know better. 
It's really the astronaut, or human beings, vorkincr together with the 
ccfitputer and autcmation and robotics in close cooperation, that will 
result in the greatest mission success. But sjorply to say that and to 
have it really happen, are, of course, not the same. We have a long 
way to go to piece it all together. 

So we were asked to think about this major issue and to organize a 
synposium, ccaiposed of e^^^erts \Aio, in our judgement, represented the 
most critical areas of human-machine interaction, even thou^ we could 
not cover all of the major aspects of human factors. The canmittee 
decided that it would be most effective if it concentrated on human 
factors issues in relation to cconputers, automation, robotics, and the 
roles of people in the space stations of the future. A reason for 
selecting the symposium format was the opportunity that it would afford 
an exchange with other people in the scientific community (including 
NASA} and other organizations who mi^t make cogent contributions to 
the discourse. 
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iBt me identiJ^ the people vAio worked hard with the r/nposiim 
Steering Groip to pat this synposium together, the staff of t le 
Committee on Human Factors: Dr. Stanley Deutsch, the Stuc^ Director 
for the cx3mndttee; Dana Kniser, a consultant to tha committee, who is 
largely responsible for liaving all of the s^Trposium papers ready on 
tune; Elizabeth Neilsen, the committee's staff assistant, whose si^port 
on the logistics was invaluable; and Beverly Huey, alsc^ a consultant, 
v^o helped us to meet our schedule in inyriad ways. They will all be 
available during the irveeting if you have any needs • 

We ask you to listen to our thou^ts, and possibly soire irreverent 
comments about the space program and the -research that's been done or 
should be done, and tc participate in the discussion. One reason that 
the proceedings are available out at this time is so that we can 
capture your ideas and include them in the proceedings of the meeting. 

I thank you for paxticipating and I hope we can neke this an 
interactive meeting. 

Now, I want to introduce Dr, Raymond S. Colladay, the Associate NASA 
Administrator for the Office of Aeronautics and Space Technology, to 
say a few words about the organization, I will then ask Dr, i^vid 
A, Goslin, the Executive Director of tlie Qaranlssion on Behavioral and 
Social Sciences and Education (CBASSE) , to say a few words about the 
National Academy of Sciences and the National Research Council, The 
Committee on Human Factors is located organizationally within CBA5SE. 

So, first, Ray Oolladay. 
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INIROEUCriON 



Raj^nd S. Colladay 



I'm delighted to see that in spite of the snow here in Washiugton, 
there is such a good turnout. I was talking to Stan Deutsch before the 
meeting and he told me that attendance had to be restricted so that the 
group would be sraall and intimate to encourage good interchange and 
dialog. I'm pleased with that because it provides a focus on a subject 
that is extremely important to NASA. And I'm further pleased by the 
fact that Human Factors is being considered at this syirposium in the 
context of Automated and Robotic systems, because that's precisely that 
way we should look at that subject. This reflects vtot NASA is trying 
to do to bring those disciplines together. 

I think that vftien you look into the subjects which you are 
addressing in this syitposium, you're going to see a discrepancy between 
our goals and our current capability, specifically in the KASA 
program. Your feedback in the discussions and in the proceedings of 
this meeting will be very iitportant to xis in planning the program and 
in tryii^ to get our capability on track with our e^qpectations and our 
vision. We have great plans for extending human presence in space. 
The space station is only the first step in that vision, which is 
taking shape ri^t now as we conteirplate lunar bases, expeditions to 
Mars, and other missions beyond the space station. 

It is my pleasure to welcome you to this syirposiimi on Human Factors 
in Automated and Robotic Space Systems, and I'd lite to thank the 
National Research Council's CJcmmittee on Human Factors for their 
efforts in conducting this syiiposiimi, and for their valuable 
contributions over the years to NASA's Aeronautics and Space Human 
Factors rcisearch programs. The committee has helped us to formulate 
and de^^elop the kinds of programs we need in this area. 

Hie subject of this symposiimi is timely indeed. Yesterxiay was the 
fiiBt anniversary of the Challenger accident, a day of rededication to 
excellence in memory of the Mission 51-L Challenger astronauts. It was 
a day v^en, as a nation, we rededicated ourselves to the excellence 
that characterizes America. For our part, we at NASA are developing a 
clear vision of the future in space and are currently refining our 
research and technology development plans to pnsure the health, safety, 
and productivity of humans in space throu^out the coming decades. 
Although it was only formalized as a research discipline about five 
years ago, our Space Human Factors Program is built upon a long history 
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of aeronaxatical human factors research, and extensive agency experience 
in life sciences research and manned space fli^t. 

Something else is happening in the NASA program vMch pleases me, 
and that is the start of a new building for human performance research 
for the space program at our Ames Research Center in California. I 
intend this building to be the first leg of a major facility that 
caribines human performance and automation research. We are, in fact, 
puttin, ? building in place to reflect exactly the kind of merger of' 
those disciplines that this symposium is addiressing. We'll call it the 
Ifttman Performance and Automation Laboratory. This will pull those 
disciplines together in a very realistic way, and will get researchers 
working in the laboratory in conpater science, artificial intelligence, 
automation, and human factors. 

I look forward to the results of this synposium. I think it will be 
extremely helpful to us. We welcome this opportunity to in'^.eract with 
you and I wish you luck in the proceedings and the discussions that 
follow. Ihank you very much. 
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KEYNOTE ADDRESS: 
HUMAN FACIORS RESEARCH FOR THE NASA SPACE STATION 



Allen Newell 



Syirposia are held for many reasons. This one is to do a task. I hope 
you are intellectually stiinulated by vjhat you hear and will take away 
some new knowledge that you do not already possess, i also hope the 
synposiats have enhanced their own knowledge by their studies and are 
gratified by the chance to advance their views from this earth-boiand, 
but otherwise splendid, platform. But neither of these has mich to do 
with the actual reason for th^ symposium. We are here to help shape 
the research that NASA will perform on how humans interact with the 
technology of the space station. 

In a nutshell, and to state v^t I hope is alreacfy shared knowledge 
among us, operating in space poses extreme challenges. It is a 
hostile, aversive, constraining and lanforgiving environment. Our 
intent as a species to make such operations successful aM to 
contimously extend their scope in complexity, duration, and usefulness 
is epitomized in NASA, and other space agencies around the world. It 
takes its concrete form by the posing of specific projects, each more 
daunting than the last, but (skillfully we hcpe) set just within the 
bounds of the reachable. Far us today that project is the space 
station, a project with an initial development phase prior to launch of 
a decade and a total lifetime of several more decades. Such projects 
force us to not only vise the best available technology and science, but 
to extend them substantially. For us today, the question is \jhat 
research is most needed that could have important payoff for the space 
station. It is not possible, of course, to encoitpass in a single 
effort all the technologies and sciences that si:5)port the space 
station. Thios, v;e focus on how humans and technology can cooperate to 
carry out the operations of the space station. 

We will speak today aljmost entirely of the space station. That is 
proper, because we need projects to give as much form as possible to a 
future v*iich is almost agonizably open. But, such far-future projects 
are emblematic of entire technological futures. Thus, behind the space 
station is to be seen an entire spectrum of future space systems, 
replete with automated and robotic devices, v*iile also being a habitat 
for hirnans. Indeed, the space station is itself not a single 
envisioned system, but a projected series that stretches out in time 
and evolves in significant ways. Only occasionally will we have need 
to distinguish even between such relatively concrete visions as the IOC 
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and SSOC. Ihe research talked about here in the context of the space 
station is vtot we see as necessary to this entire technological 
future. 

Hiis is our task. Its success can be measured by the influence of 
this synposium on how humans ani technology actually work together. Do 
the crews that run the space sfc.\tion, both on the ground and in space, 
have an easier, safer, more productive time than would otherwise have 
happened? We are only one player in the hundreds of individuals, 
gra^ and organizations that affinct what goes into the space station, 
and a hi^y transient one at that. Our only leverage is the cogency 
of the ideas we put forth, still, we fail if nothing down stream is 
different because of what we say here today. It is not enou^ to have 
an effect, it must be the rigiit kird of effect at the ri^t place and 
time. Rjrthermore, the effect depends not only on NASA decisions about 
Its research program, but also on the quality of the researxSi that is 
thereby enabled, and whether its results transfer into the qperational 
space station— a notoriously tenuous conjunctive chain. Still, thou^i 
we talk here today of possible research, we hope for operational 
results. 

My task, ri^t now, is to get us laimched— to set the stage and 
provide the context for the papers you will hear over the next two 
days. I will only take a few minutes to do this. But some overview 
will help us to keep on track throu^out the meeting. 




FIGURE 1 Artist's construction of the Space Station, due to launch 
1996 
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THE SPACE STATION 

let's start with the space station itself —althou^ I ain hardly the one 
to c3o so, with an audience that contains many with active 
responsibilities for it. Still, even I know enou^ to start with the 
obligatory ^ picture (Figure 1) . This is of course a fantasy, cortposed 
fixaod the minds of many persons and living only there and derivatively 
in the miixte of receptive a\:idiences. In accordance with its fantasy 
character, it changes continually— if not daily, at least monthly. The 
planr^rs harden the fantasy with physical mocJaps that can be walked in 
and gawked at. That helps, but the time constants to realization are 
still of the order of half-decades. 

Ihis way of talking about the space station may induce a sense of 
fragility. That could be a good thing, if it brings with it an 
iiKapeased sense of commitment to making it happen. However, my actual 
objective is to induce a sense that much can change in the space 
station before it takes its place in the sk}/ and, indeed, after it 
does. If we are to consider launching research in 1987 and expect it 
to have operational iiipact, then the time scale of that operational 
world must be sufficiently long and its character sufficiently 
malleable. 

Planning—even research planning— must have some grip on reality. 
Thus, we need to focus on the hard constraints on the space 
station— the ones that appear to hold no matter what, and on vMch we 
can build securely. Table 1 presents three handfuls— already more than 
can be assimilated in an introduction. These constraints are vdiat 
strike a technically observant human-factors specialist immediately 
xspon hearing a briefing on the station. They are the constraints that 
shape the roles that humans must play and the tasks they must perform 
to make the space station function. What makes them unyielding is the 



TABLE 1 The Hard Constraints that i^ply to the Space Station 



1. Long lifetime of the station (decades) . 

2. Medium term crew residence on board (months) . 

3. Small groiqp of residents aloft (less than ten, to begin with) . 

4. large groip of operators (non-residents) aground (hundreds). 

5. Very small amounts of resources available per resident. 

6. Very small amounts of space available per resident. 

7. Infrequent physical communication (months) . 

8. Continuous, but limited-bandwidth communication. 

9. Time delay of station communication of .5 to 2 seconds. 

10. Modest time constants of action (minutes to hours) . 

11 . Wei^tlessness . 

12. Continuous, hi^ task load. 

13. Continuous hi^i threat-level of many potential errors. 

14. Continuous public exposure. 

15. Conopletely artificial environment. 
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limited state of our space technology, the priinary goals set for the 
station, and the necessity of acquiring certain ejqperiences as stepping 
stones to future technological frontiers. No matter how technology 
changes we must pass this way to move forward—not, of course, with the 
exact particularities of the space station we will build, but throu^ 
scanethir^ with the general characteristics listed in Table 1. 

mn^ familiar things follow frcan this: the general strangeness of 
the wei^tless world and its frustrations; the isolation of the station 
groap, coi^jled with the lack of privacy and the extent to vMch members 
are locked in; the public work-oriented, regimented world; the conplete 
d^jendence on the efforts of others; the stress of continually living 
close to fatal errors. Ey and large, humans respond adaptively to all 
these conditions, still, humans in space must spend their psychic 
resources to cope with these conditions, rather than spend it in other 
more productive ways. 

One striking thing is how saturated with technology the life of the 
station will be. Oliis is completely true of those stationed aboard, 
but is almost as true of those aground for their workaday world, 
althou^^ they get to go heme to the grass each evening. 

Another striking thing is that the residence time-scale is long 
enoi^ so that many fuixtions have to be accommodated that can be 
avoided in shorter flints. Ihe station appears to be a microcosm of 
life— so many activities must occur that one can find any prt^lera or 
task one looks for, or at least a dose analog. Now, in fact, this is 
not quite so. Many functions, such as raising a family, becCTiing 
educated, moving to a new home, and planning retirement, do not show im 
at tome scales even as long as months. And to those concerned with the 
man-machine system in the modem filter plane, where the focus is on 
actions in the subsecond range, the station will appear downri^t 
leisurely. Ihat the space station occt?)ies a middle range in the total 
tmascale of human action is a significant siitplif ica\ ion— as we will 
discover vto we have to plan permanent space or lunar stations. But 
even so, from the perspective of a human factors analyst, the space 
station has moved a long ways toward total living and not just 
temporarily oco^iied workspace. Along with that has come an almost 
vm-enuraerable collection of tasks that humans ittust perform, and the 
need for designing the artificial environment in vMch to perform them. 

Still the tasks must be enumerated. One of the great liabilities of 
technological environments is that they don't take care of 
themselves— not yet and for some time to come. The tasks to be 
performed in the station and between ground and station must be 
enumerated and e^qplicitly planned for. What we fail to enumerate here 
below IS m parlous state vp above. There will always be true stories 
about the novel activities of intelligent astronauts, solving 
life-critical prdalems or having fun in ways we could not predict. 
31ess them for that. But let no one argue back from that blessed fact 
to the need for less preparation. And preparation implies e35)licit 
task description and enumeration. NASA, of course, has gone to great 
lengths to do this. Table 2 providtis some reminders of v*at those 
esTumerations cover. 
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Bie left hand cx)lxirnn siirply lists the various subsystems involved, 
so one gets scsne notion of diversity, with r^espect to each of these 
there are xoany actual tasks to be performed* Tto enumerate them is to 
descend into the technological gritty of each type of system. But 
various types of activities that go into these tasks can be identified, 
which is \*at the ri^t hand colvmtn shows. These generic activities 
ccane in indefinite variety as well, in terms of what must actually be 
aoccaooplished, with what initial knov/ledge, and against jAxat 
constraints. Finally, I have put across the bottom vfliat is perhaps the 
most iirportant factor, namely, that the time scale over \^ch these 
tasks endure stretches f rck less than a second to about four 
months—seven powers of ten. Each task in its individuality fits into 
this time-stretch at scaofts point. But every duration contains tasks of 
every type. 

Ihere are two points and one conclusion to be made from all this. 
First, I would inpress vpon you that there are an almost unimaginable 
variety of tasks, \*ich contain almost any ccahbination of task demands 
one cares to oontertplate. Second, the vast majority of these tasks are 
to be acccsQfplis h ed by scane ccaribination of humans and technology. To be 
sure, at the top ultimately there is a pure human, if only a 
congressman; and at the bottom there is a pure machine, if only a 
pushfcaitton making an electrical contact. It follows that we can 
consider today only a selection of all the problems. We will of course 
seek for research that is generic in its character and that will iitpact 
large classes of these tasks. But much that is important will not even 
be mentioned. 



TABIE 2 Types of Qn-Station Tasks for the Space Station 



Subsystems Generic functions 



Power Power hardling 

Guidance & navigation Checkout 

Qamunication & tracking Mechanical actuation 

Data handling Data handling and communication 

ProSPUlsion Ifonitoring/control 

Environmental control and Conputation, decision and planning 
life si^jport 

Thermal Fault diagnosis and handling 

Structures/mechanisms Sensing 
Crew systems 
Payloads (experiments, 
itanufacturing, observations) 

I I I I :l 1 "I i I 

• 1 sec 1 sec 10 sec 100 sec 10^ sec 10^ sec 10^ sec 10^ sec 10^ se 

1 1 min 1 hour 1 day 1 month 
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THE TECHNODDGY OF INTERACTION 

The Classical situation of human factors has been that an industrial or 
military organization develops seme machine to do some task. Ihe 
huinan-cperator aspects of cxjntrolling this machine and of being trained 
to do so are dealt with in due course. In the best of cases, this 
occurs early enou^ to permit modest alteration of the engineering of 
the interface. But in the main, the technology of the machine is 
autonanous and fixed. 

With the advances in artificial intelligence and ccnpiter science in 
general, and in cortpater interfaces in particular, the situation is 
changing— and changing in several ways simultaneously. First, the 
machines are becomii^ more complex, yet capable of more autonomy and 
intelligence at the same time, Secord, the interfaces themselves are 
becoming more intelligent so that they can aid the i:iser and operate 
cooperatively with him. Ihird, all interfaces are becoming alike in 
their utilization of a common hardware and software technology. 
Finally— and of a different order entirely— the technology on vMch all 
this is based in itself undergoing rapid evolution, so that all the 
features just mentioned are not new fixities that can be depended \jpan, 
but are themselves on the move. All of these current truths have 
double force for the space station, ^ch is located a long ways in the 
future. ^ Let us focus on each of them in turn. 

Machines are controllable arrangements of matter and energy that do 
things to the physical world. (Ihus, tools are machines.) Bie ability 
to be controlled is of their essence, for it is vdiat changes them, as 
micro parts of the world, from a thing that can be taken advantage of 
(as to drink from a brooklet happened vqpon) to a thing that can be used 
at will (as to turn on a faucet vdienever thirsty) . So machines bring 
with them the prdblera of the human-machine interface, and necessarily 
those interfaces are dynamic and continue throu^out the duration of 
use. 

As machines become more capable, throu^ the rational foresi^t of 
their designers and the skill of their builders, the tasks that 
machines can do without human intervention increase. Althoui^ the real 
measure is in the total range of useful tasks they can accortplish with 
acc^jtable reliability, an appropriate indicator is the length of time 
machines can go without interaction with humans, with this increased 
scope comes inevitably the problem of vdio should do a task, the human 
or the madiine. Formally, this is exactly the same as the problem of 
vdiether this human or that shoiiLd do a task, or vdiether this machine or 
that. _ However, because of the category difference, the human-machine 
question is taken to have a more profound character and it becomes the 
focus of scientific attention. It is a surrogate, of course, for our 
need to understand the advancing capabilities of machines. 

Hiat question is finally about to change its form radically. The 
advances in ccarputers and conpitation have now been driving 
ejqxanentially for forty years. All parts of that advance are 
significant for us today, in part because they all interrelate. The 
driver of it all, we always say, is the cost/performance of the 
conpiting devices and the level of their integration. But by this time 
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that itself depends on software design systems with quality graphics. 
So it is all one ball of wax. Nevertheless, the pa2±s where the 
advances touch us the itost here today is in robotics, artificial 
intelligence and the technology of the human-corrputer interface. 
Ihrou^ these, the amount of intelligence that can be incorporated into 
machines is new reaching the place vdiere the problem of assignment of 
functions to men or to machines no longer holds any charm. The 
question must be phrased — ^How can humans and technologies cooperate to 
attain a set of system-level goals. 

Ihe situation at the interface between the human and some mac±dLnes 
provides a good exaitple of the increase in the capabilities that are 
available, with a concomitant increase in the conplexity for those of 
us \jho design and xmderstand these systems. As machines increase in 
capability, interfacing to them becomes a conplex task in its own ri^t 
and requires substantial knowledge about what is required to 
communicate knowledge back ax^ forth — languages, protocols, 
communication over intermediate links, the status and location of the 
ccanraunicants, and on into the ni^t. The soli±ion is to have special 
agents that have this knowledge or knew how to acquire it, in short, 
intelligent interface agents. But such agents imply that knowledge 
about how things work will be distributed— of what good are such agents 
unless they relieve other parts of the system of the responsibility for 
having certain knowledge and skills? But this reinforces the point 
itade earlier that it no longer makes any sense to cast the problem of 
how humans work with technology in exclusive terms of who controls 
wham. Rather, it moust be in how agents embodying distributed sources 
of knowledge cooperate. 

One more point about the technology and I am done with it. If NASA 
had to settle for the level of intelligence in current rxiotic and 
e3q)ert systems, this syitposiimi would have a very different character. 
We have, of course, come a long way in conputer science in the last 
forty years and this is plainly evident in existing robotic and 
intelligent systems. But the changes are proceeding very rapidly and 
substantially more capabilities can be e^q^ected to be available in 
another five years or in five years itK:>re again. This introdur:^ 
tmcertainty into our proceedings, for we must not only talk of vtot new 
research mi^t bring, but must place this against a background that 
will increase in possibilities no matter ^t NASA does. But this same 
motion also adds to the sense of excitement of the new powers tliat are 
possible in the space station. The space station, by being a project 
measure in terms of decades, both suffers and benefits in the extreme 
from this naotion of technology. 



RESEARCH OBJECTIVES 

Given the picture just sketched of tasks and technology, the question 
of the day is v^t research should be done. The substantive answers to 
that question are the responsibility of the speakers of this 
syirposium. I would only ask you to keep three general considerations 
in mind. 
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i«4. ^® research topics raised here range widely—from artificial 

intelligence, to the hintian-ccaipiter interface, to telerxibotics, to 
issues of social organization. Ihese are not just a congeries, brou^t 
together to obtain coverage. They are all facets of how humans are to 
interact with the primary technology of the space station, and what 
teciJTologies are involved in. that interaction. A research program 
needs to address all these aspects in sane coherent vray, and not treat 
them as separate questions. 

Second, we have had to sairple—to focus on some issues and to 
neglect others. But the research program needs to consider the full 
range of phencanena. It is in research plans, area the study efforts 
that support them, that one engages in the ccopulsive attempts to 
taxonomize the domains and worry seriously about coverage ard missing 
ei.ements. A symposium is to mate clear the fruitftalness of research 
areas and to show that there are exciting research questions. Attempts 
at ccmpleteness and r/enhandedness would only dull the senses. Third 

more glibness than honesty, I have just shifted an immense burden 
from the synposium speaJoers to the symposium participants—or at least 
some of them. For, of course, the domain of research is so broad that 
coverage is a cOiimera. That is especially true if one thinks of 
research as devoted to getting answers to specific questions about a 
specifically configured space station. Such answers must be 
obtained- that is vtot engineering requires. And in the present 
context it is human engineering and even organizational engineering A 
research prcjgram that is in effect a systematic and planned progr^ of 
human and organizational engineering, with the resources to do soma 
background studies, cannot possibly provide the coverage that is 
necessary. Thus, the research program must be aimed at discjovering 
cOTceptual, theoretical and technical tools that will permit the human 
and organizational engineering of the space statical to proceed with 
greater efficiency and accuracy. Only if a researxih program advances 
the theoretical state of the art, including therein systematic 
organizations of data that permit answering a multitude of questions, 
va3.1 It ser/e NASA in the decades it takes to achieve the space 
station. 



THE INSTITUTTONAL OONTEXT 



IfL ^ ^ cobbler, I have stuck to my last, discussing the 
sutet^tive issues. But it is important to say something about the 
institutional contejct in vhidh the symposium occurs. Blessedly, I need 
not take ray point of d^arture frcm the current spasm of reflection, 
critique and renewal that has been the fallout of the Challenger 
disaster. For our timescale is too long for that to count as iiore than 
a transient. At least that is true if NASA can continue in its planful 
ways, vMch it shows every sign of doing. Thus, in setting out the 
institutional context I will not talk about the microstructure of 
cxanmand and timing that will, in fact, have the lion's share of 
responsibility for x^ther any trace of this symposium's efforts 
survives these two days. Instead, I will point to larger entities. 
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let us start with NASA. It is, of cx3urse, the primaiy player. It 
is its space station, after all. Its primary view of humn factors 
considerations has got to be sinply as an ingredient to make the space 
station better— ejs a factor of production, in the economist's sense. 
Ihat view leads inevitably to working backwards frcm specific questions 
about the space station to specific studies to answer them. After all, 
in the logic of planful organizations: To get X, set a plan for 
getting X. Furthermore, the cogency of a plan can only be apparent if 
it explicitly and recognizably puts dcwn each step, from vdiat is 
available ini'lally to the obtaining of X. Uiis leads to a thorou^y 
applied effort and one characterized by short-range goals with ti^t 
loops of justification. Such a logic is certainly appropriate in 
part — after all, if NASA doesn't do the studies to deliver the answers 
it needs on the riitty-gritty of the space station, vdio else will? But 
the timescale of the space station is long enou^ so that other 
attitudes are apprqpriate as well. NASA can change the available 
science enou^ to make a difference to the space station itself. And 
to do that the research must be launched on a broader and freer path, 
letting it pick its way among the interesting questions of today to the 
different questions of tomorrow. Ihe issue for NASA then is vSiether it 
will rise above the immediate applied questions of human factors-— to 
vAiich the safety and productivity of the ascronauts will force 
attendance in aiiy event—to the faith that major gains for the space 
station can be attained from supporting basic long-term research. 

Each of us has our cwn stories of vdiera such long range research by 
an institution has made immp.nse differences to the downstream operation 
of that institution. Not being a NASA insider, my stories of that ilk 
do not come from NASA. But even to an outsider it is apparent that 
there must be a vtole book full of such stories. After all, space 
science is an almost new science, even thou^, as always with science, 
it has a v^ole tangle of historical roots in early rocketry, astronomy, 
and more. And space science is practically a creature of NASA, so NASA 
must know all about the gains from bringing a new science along. 

Nevertheless, it may be worth recounting briefly one of my own 
stories. Ihis is DARPA's creation of the field of artificial 
intelligence and esqpert-systems technology. DARPA did not start 
artificial intelligence, that occurred in the mid 1950s. But only a 
few years afterwards, in the early 1960s, DARPA began its qpen si^jport 
of that part of corrputer science, it did so in an essentially free 
spirit and mixed with the marr/ other things it was also si^^porting, 
such as time sharing, graphics, multiprocessors (Illiac iv) ard 
networking. The siqpport was substantial, but was far from being the 
dominating item in the mix of DARPA programs. Ihe important aspect, 
from the present point of view, is that DARPA started its si^jport in 
1962. By 1972, a mere decade later, the first ejq^ert systems had begun 
to emerge— Dendral and Mycin. By 1982, only one more decade, the 
commercialization of eaqjert systems had begun. Otoday, five years 
later, thou^ still a gr^en and nascent technology, it has become the 
property of us all. it has became integral to much of DOD's own future 
and is now integral to our discussions here. But for almost all the 
first twenty years, DARPA was essentially the only si5)port for 
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artificial intelligence. (My friends fram ONR and frara NIH-sv?)ported 
AIM (AI in medicine) may be a little annoyed at so sweeping a claim; 
yet it remains close to true.) Hius, we see that an agency can bring 
into existence wholly new techniques and ideas for its own use 
downstream, it cannot usually be done in less than a decade. But in 
timescales that are ocsnmensurate with the space station, such things 
are possible. And their payoff is incalculable. 

The second major player is the collection of scientists and 
engineers who will conduct the research. Uiis is not a homogenous 
groqp. Most iironediately, the scientific cadres within NASA concerned 
with human factors and artificial intelligence are to be distinguished 
frcan the scientists in the universities and research organizations 
across the country. Each clearly plays a different role, althou^, in 
the style of the times, istrong attianpts exist to weld these into a more 
oontmuoas oommunity, witJi the establishment of places such as the NASA 
Research Institute at Stanford Universiiy. 

The more iiiportant inhcraogeneity is among the social institutions we 
call professions and disciplines. Focus nanxn^^ly on the human-science 
issues concerning the space station, and ignore totally the 
h''2f-hurdred natural-science and engineering disciplines concerned with 
the physical t-tructures in the space effort. However, a gaggle of 
disciplines arvi still gathered around this seemingly narrow focus. 
Alphabetically, they are: artificial intelligence, cognitive 
psychology, canptter science, himan factors, industrial engineering, 
organization theory, robotics, social psychology, sociology. I have no 
doubc C(verloGlc£d scane, but: all these, at least, are represented among 
the speakers of this synpssium. The irihoraogeneilY here arises from two 
sources. Ficst, the issues of the space station involve multiple 
technologies, and the relevant husnan phenomena are so diverse that they 
necessarily make contact with different human sciences. But second, 
multiple human-science disciplines focus on the same phenomena, but do 
CO frcm different perspectives. In particular, the emergence of the 
computer as a mass phenomena has raised the problem of human-r mputer 
interaction to prominence. At least four disciplines—artificial 
intelligence, cognitive psychology, conpiter science (mostly graphics 
and interface programming) and hJman factors— are currently engaged in 
forming an interdiscipline called human-ccnpiter interaction (HCI) . 
The effort is currenUy focused on the individual in interaction with 
the computer via a system of interaction mechanisms (displays, 
kej^xjards, pointers, etc.). it is acknowledging, thou^ only 
gradually, social and communicative dimensions. The conceptual and 
disciplinary turbulence involved in all this is both part of the 
inhomogeneity of the current scene and revelatory of it. HOE is only 
one part of the human-related issue of the space station, though a 
significant one. 

The NASA situation that we discuss at tMs symposium provides an 
opportunity for these disciplines. They can, of course, treat the NASA 
problems as if they were just another collection of interesting 
situations in v*lch to ply their investigatory trade. Our 
nation— blessedly, once again— is extraordinarily pluralistic Thus, 
NASA research ca-tracts and grants can be taken as providing additional 
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inicm--research opportunities in a larger mix. Ihis is one view artl an 
iitportant one. 

But the NASA sitxiation provides a larger opportunity, or at least it 
does if NASA chooses to make that opportunity avciilable. Ihe space 
station provides a unique focus for the developafnent of the science of 
hew humans interact in a technology-saturated environraexit. By reaching 
so far ahead of the degree of saturation in the rest of current 
society, it offers a chance to stud/ a world well ahead of its time. 
It is a imique opportunity in this historical mcaonent, althou^ it will 
beccaoae less so as the saturation of the rest of the world proceeds. 

It is important to realize that in applied sciences technological 
foci have an immense influence on the character of the scieix:e. One 
has only to think of the influence on human factors of its beirg 
nurtured by the aircraft industry, vMle beirg relatively ignored by 
other industries. Tlius, NASA has a fleeting opportunity to bend the 
twig of Hd to a long-term concentration on aspects especially relevant 
to NASA's Interests. 



ENVOI 

The ingredients of the syitposiima have new been assembled before your 
very eyes — ^the space station; the tasks of human-technology 
interaction; the technologies that are both the c±»ject of that 
interaction and the means to make it work; the orientation towards the 
research that needs to be done; and the institutional setting within 
vMch this synposiura must make its contribution. Let los now move to 
the substantive papers. 
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ERDEUCTiVllY IN THE SPACE STATION 
Raymond S. Nickerson 



INTROEUCnON 

What is produc±ivilY? How do we measure it, predict it aiid control it 
on earth? To vfliat extent cem that knowledge be extrapolated to a space 
ccaitext? VJhat do we rot know ahTut productivity on earth that mi^t be 
found out — aiva is worth finding out — throu^ research? How mi^t the 
e)q)ected findings be applied to space? How should the researdi be 
directed to ensure its applicability to space? Are there inportant 
questions about prxDductivity in space t±at earth-based research is not 
likely to help answer? 

I wish I could promise to answer these questior^ here. Unhappily, I 
cannot. These are tiie kinds of questions that 1 have had in mind, 
however, in preparing this paper. In v4iat follows I will focus first 
on the notion of productivity and on how it has been measured and 
manipulatied in earth environn^tzs, and then trum to the question of 
productivity in space, or more specifically, the Space Station, The 
paper ends with a set of recommendations for research. 



WHAT IS ERODQCITVITY? 

Productivity is an elusive concept. It seems strai^tforward enou^ 
v*ien one begins to consider it. It is easy to think about the 
productivity of chickens or dairy ccws in terms of eggs laid or milk 
produced per unit time; here we are dealing with output in a very 
literal sense. And it does not tax one's imagination to think about 
ccmparing the output of tne one producer with that of the other. To do 
this we need a way to describe eggs and milk quantitatively in the same 
terms, vftiich is not difficult. Since eggs and milk are valued as 
foodstuffs, we could describe them both with respect to their 
nutritional ingredientzs. But qaanti:^ing productivity only in terms of 
output is not very useful from an economic point of view, and as it 
relates to chickens ajnd cows as producers it would be grossly unfair to 
the chickens; we mast also take into account how much chickens and cows 
consume in order to produce a given amomt of nutritive capital by 
means of eggs ax)d milk respectively. And to round out the picture we 
must factor intx> the equation not only vdiat the producers eat, but 
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oth^ resources-, i^n which their continuing production depencSs. To do 
^ this we may find it convenient, since not all the f adSTthat nSt 
5rS"^'^?^K^ nutritional, to quantify everything in^St^ 
^nns. But this gives us no serious problem. The situation is stil^ 
fair]y siiiple.conc^rt:ually: chickens and cows produce foodstuff s th^t 
can be givai a monetary value, and to do so they consume resources that 
^ a roomtary cost; productivity can be thou^t of in tS^??he^^ 

? ^PPly the same type of thinking to human 
goA^tivity, one has no trouble as long as the human activity involved 
IS analogous to laying eggs and givij^g milk, in the sense of producing 
tangible goods that can be used to satisfy basic humS^LS,^^?^ 
consuming resources in the process of doiJg so. Ihe pic^ aS less 
clear quickly, however, v^en what is produced is not £ ^ 
tangible-perhaps not even readily identifiable-and not easily 
quantified in monetary terms. How does --ne measure the productivitv 
S °^ scientist, the poet, thelSJSSS^- 

^ sal^erson, the physician, the corporate exStive? thTaSSf ' 
the errtertainer-or the astronaut? «-ui-xve, -cne auuete, 

^->,o^? °5 ^^ff^tional precision has seldom been a great deterrent to 
^iT^ f«d."P«^ctivity" is no exc^ion iTthis^SS. 

It IS a pcpalar word in eooncffoics, and like "truth" and "beautv " 
oc»motes scroetiiing much to be desired, whatever it means. wiSin the 
lit^ture p^taiiiii>g to opace ej^Jloration, one f iiids referSSS^tT 
^J^eases in the productivity of spacecraft crews result^^ 
changes in displays, control procedures or other variablS? ^seldom 
IS It clear ^ctly vAiat this means. Ihe word is alsTsSi SSoSS 
the human factors literature more generally; althou^ ^^^0982?^ 
S SSSliS^^ «ie unconstrainld way ^ ^IchTif ^ThS ^ 
^!L^f^ difficult to discern in this context. In practice 
productivity is often used more or less as a synonym for performance- 
If performance iitproves, by nearly any criteriS^, ^c^SST^Sid 
^^T^ Privity Is^'said to go^di^n!"'^ 

T^^J^ — ^^"^^ ^ precis- quantitative meaning by virtue 
S^^Tf^if^^^ ^ ^ ineasurement.^Saef of 

productivity are ^ically expressed as a ratio where the numerator is 

^"^^ is prxxJuced or the value of sa^T^ Se 
denOTuinator is seme measure of iiput (vAiat is used im in the production 
process or the c^ Of same). What constitutes i:p^ Si^t^S 
^ goantified, differs considerably from case to cS^, ' 

^f^^ productivity indices over time can sometimes be 
^ interpret (Baily, 1986) . Mbreover, often the word is^ 
as ti^ It intended to connote a quantitative entity/St 
SuS the input aM output variables are S'hS'tSr 

nmSS*-?^?? 2^^.^ °l°2ely related to productivity are those of 
gSSS ir^ngSS^- ^^i^ity allies produ^ion, or^r^ 
SS^S?^ product and producer. Productivity is an attribute of a 
proA^; and a producer, by definition, is one who produces 
sometiiing. What is produced may be tangible (paper Slips, a household 
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appliance, an airplane) or intangible (an educational service, 
entertainment) • A producer may be a person, a person-machine system, a 
team, a factory, an industry, an economic sector (agriculture) , a 
nation, the wrld* 

But althou^ productivity and production are closely related 
conc^jts they are not the same. As we have noted, productivity is 
visually ej^jressed as a ratio of sme measure of out^xit or product value 
to scBoae measure of iiput or production cost, and the goal, in most 
cases, is to make this ratio as hi^ as possible* Production usually 
refers only to output quantity. Given these connotations, it is easy 
to imagine production increasing or decreasing independently of changes 
in productivity. If, for exaitple, a manufacturer produced 10 percent 
more items in a given year than in the preceding year, but doing so 
required a 15 percent increase in the number of eitplqyees, we mi^t say 
that production increased vftiile the productivity of the enplqyees 
declined. 

Ihe conc^ of efficiency, li]<e that of productivity, relates out^t 
to the resources consumed in obtaining it. Efficiency has to do with 
get±i2^ the most out of given resources; the challenge is to organize a 
production process so as to minimize wasted effort. A process is said 
to be made more efficient vdien the \anit costs of out^jut are decreased 
or when the consumption of a fixed amount of resources yields a greater 
out^jut than before. 

Tediniques for measuring the efficiency of assembly line workers 
were among the earliest contributions of engineeririg psycholcgy to the 
manufacturing process and have been used extensively in the work 
place. TSiese have typically involved analyzing production tasks into 
observable conoponents. T3ie development of task-analysis techniques has 
received considerable attention from hiiman factors engineers (Van Cott 
and Kincaid, 1972; Wbodson, 1981) . Such techniques have been more 
readily applied to psychomctor tasks than to tasks that are primarily 
cognitive in nature or even those that have major cognitive 
coatponents. Attention has been focused increasingly, however, on the 
problem of analyzing cognitively-demanding tasks, as an increasing 
percentage of the tasks performed by people in the work force are 
defined more by cognitive than by psychomotor demands. 

We cannot hope to setiiLe terminological issues here. Moreover, 
definitions are of limitzed utility v*ien deaHjng with terms that are 
widely used, with a varie*^ of connotations, within a field. For 
present purposes, productivity will be taken to be very close, but not 
quite identical, in n^aning to efficiency. An entity (person, grcap, 
system) will be considered hi^y productive vAien it uses its resources 
to maximum advantage in aocortplishing its goals. One can be efficient 
in tile sense of not wasting resources siitply by using those resources 
very sparingly, but that type of efficiency could be count:erproductive 
if resouross are husbanded to the point of precluding gettuj>g the task 
done. To be productive one has to use one's resources and use them 
well. 

As a working definition of productivity I will use: effective and 
efficient use of resources in accomplishing a goal. The enphasis is on 
both effectiveness and efficiency. A productive syst:em is one that 
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gets the intended job done and does so with a itdnimun of wasted effort 
and resources. I do not mean to split hairs here in making a 
distinction between efficiency and productivity; if one's idea of 
^ficiency incorporates effectiveness, then I see no objection to 
thinking of efficiency and productivity as more or less sioionymous. 
Effort and resources can be wasted as a consequence of many factors, 
sucii as poor training, lack of motivation, mismanagement, faulty 
OTganization, misscheduling, and a host of others. Productiviti' will 
be said to increase vdien either mora is accoitplished with no increase 
in consumed resources or the same objectives are attained with a 
smaller ejqpenditure of resources. 

Kiese are still scane&Aiat iaprecise notions, but not so inprecise as 
to be useless. In the Space Station context, as elsev^ere, \*en 
modifications in design or operating procedures have big effects on 
productivity, there probably will be no difficulty in getting a 
ccaisensus that productivity has reslly been improved. When tasks are 
performed more easily, more reliably, and with fewer costly errors 
most interestai^ observers will probably be willing to descrUoe vdiat has 
happened as an increase in productivity, and even if not, they ar^ 
likely to agree that changes for the better have occurred, it seems to 
be generally assumed, if only tacitly, that anything that inproves 
human performance (increases speed, accuracy, reliability) prcbablv 
increases human productivity. This appears to me to be a reasonable 
assumption, and a very useful one. Frequently in this paper, the 
dascussion focuses on variables that influence performance, the 
Dustif ication being the assunption that \jha.t affects performance for 
better or worse will affect productivity in a conparable way. 



ASSESSING ERDDCJCnVITy 

It is helpful in the present context to distinguish between the problem 
of determining v*iat the level of productivity is at any given time and 
«iat of determining v^ether productivity is changing, or has changed, 
one mi^t assume that the second problem is more difficult than the 
first, inasraudi as a measure of change, or difference, is derived from 
the m^e fundamental measure of absolute value: to determine whether 
productivity is more or less this week than it was last, one simply 
takes the difference between this week's measure and last week'sT But 
this is so only if one wishes to know the magnitude of the difference. 
If one is content to know only the direction of the difference, it may 
not be necessary to know the individual magnitudes, at least if the 
magnitade of the difference is relatively large. One does not have to 
knov./ the precise wei^t of each of two c^jects to know \jhidh one wei^ 
more, especially if the difference is sizeable. 



Productivity as; a Percentage of Capacity 

Productivity is saraetianes quantified in terms of performance relative 
to a maxiimim. When this is done, maximum output or performance is used 
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as the stanaard against \Mch to evaluate the actual out^t or 
performance, \^ether the perfonaer is an individual, a system (say a 
factory) , or an eooncaiy. Thus one mi^t encounter the claim that the 
productivity of a given industry in a particular region is currently at 
abcut 70 percent, \Mch would mean that that industry is operating at 
70 percent of under certain assunjjtions, is the maximum 

possible* Eccaicstiists often refer to how close to capacity factories 
and other manufacturing facilities are operating. The ability to 
specif how close to capacity some entity is operating presi:?}poses a 
metric in terras of \Mch to quantify the operation* Determining v*iat 
constitutes maximnm capacity can sometiites be a coitplicated and 
controversial prxjess* Further, maximum must be understood as maximum 
within a particular context. Hib maximum out^wt of a given factory, 
for eaeicple, could mean maximum obtainable with the present tooling, 
layout, mar5)cwer and stock; alternatively it could refer to vdiat would 
be obtainable if one or more of these constraints on output x^/erB 
relieved. 

As applied to individual human beings, capacity connotes the best 
(vMcii often, but not alvays, equates to most) one can do in a given 
situation, the limit of hvman performance— <)r, more accurately, the 
limit of the individual performer. Conceptually, there are -too ways to 
determine capacity in any given instance: one is to derive it from 
theoretical considerations; the other is to measure performance lander 
ideal conditions. Neither works very well. While information theory 
once provided a basis for the hope of defining capacity theoretically, 
it proved to be a false hope, and psyciiologists have not yet found or 
developed an alternative that can do the job. Ideal conditions for 
performing a given task-^vMch would have to include an optimally 
motivated performer—have proved also to be easy to conceptualize but 
difficult if not iirpossible to acbjalize. 



Differenticl Productivity 

Differential productivity in a business context is sometimes measured 
in terms of changes in the number of eirployees or amount of eitployee 
time required to get a fixed amount of work done, or conversely by 
changes in the amount of work acconplished by a fixed staff. Thus a 
retail corrpany is said to have doubled the productivity of its bill 
collection departments \^en it managed, by conpaterizing its operation, 
to place the same number of calls with a 50% reduction in staff. And 
the productivity of an insur^ce company is described as increasing 
fivefold vAien the number of policies issued per enployee per year 
ii^creased by a factor of five (Bowen, 1986) . 

Studies of individual human productivity in specific job situations 
have often focused on the performance of individuals relative to the 
performance of other individuals on tlie same task. It is possible to 
say that A is more productive than B without saying anything very 
precise about how productive either individual is relative to a larger 
frame of reference. Ifeasures of whiice-collar productivity typically do 
not yield absolute quantities, but do permit catparisoiis among similar 
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organizations (Drucker, 1986) . 

m the Space station program, attention will probably be focused 
priiRarily on differential productivity (the cost of attaining some 
prtx^iction objective in space relative to that of dbtaining it on 
eartn; or the cost at one time relative to that at another) . While it 
would be interesting to be able to relate productivity to sane 
theoretical maxunum in this context (e.g. by relating production to 
some measure of capacity) , it is not clear how to do that. 
FOTtajnately, it is not necessary to be able to quantify maximum 
prxxJuctivity in order to determine \^ether one is moving toward or awav 
frcifl it. 

Ihat is not to suggest that assessing differential productivity is 
likely to be an easy task. Several investigators have commented on the 
variability of measurements of productivity, especially those that 
relate to individual human productivity, and on the resulting need to 
make many measuremerte over a considerable period of time if reliable 
numbers are to be obtained (Muckler, 1982) . it is especially difficult 
to measure productivity in intellectual tasks, inasmuch as methods for 
assessing cognitive performance are not well developed. When a person 
0^ staring out of his office window, it may be irpossible to tell 
\rtiether he is idly daydreaming or is engrossed in "productive" 
thou^t. And even if he were known to be daydreaming, it would not 
follow necessarily that tliat time was lost from a productivity point of 
view. One widely held view of problem-solving distinguishes an 
"incubation" period in the problem-solving process during which 
EJ°P!fP ^J^^ °^ ^ problem in spite of— perhaps because of—the fact 
that the individual is not consciously focusing on the problem to be 
solved— and there are numerous examples of scientists and other 
think^ reporting insists that liave occurred they were not 
actively engaged in working on the problem. 

Whatever methocSs are developed for measuring productivity must take 
quality— as well as quantity— of output or work into account in some 
vray. In manufacturing operations, product quality affects measures of 
goductivity to the degree that items that fail to meet a preset 
standard became rejects. The importance of quality control in this 
sense is obvious and the difficulties that some industries (e.g. the 
manufacturing of computer microchips) have had are well known. Ihis 
type of linkage between quality and quantity is a fairly gross one 
howev^. _ Differences in quality tend to be ignored so long as the 
quality is not sufficiently low to necessitate rejection. In 
nomianufacturing activities the relationship between quality and 
quantity is even more tenuous, in spite of the fact that here one mi^t 
expecA qualitative differences in output to be bo\2i larr^e and 
Mportant. _ Qiiality wil] certainly be an important consideration in the 
?pace station context. The quality of the ejq^eriments that are done, 
for example, will be at least as important as the number. 
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Workload and Its Assessment 

In a cxHtplex system the operation of ^diidi depends on functions 
perfomed by both ipeqple and itachines and, especially, by people and 
itachir^ in interaction, hi^ productivity will require that workloads 
be at or near c^>tiital level* Significant overload will reduce 
productivity throu^ increases in the frequency of human error; 
significant xaiderload will inean wasted resources at best and possibly 
direct negative inpact on productivity resulting frxam boredcan, 
ii^^ttentiveness or other difficult:ies arising from feelings of being 
imdertttilized or imiirportant to the operat:ion* Workload arxi its 
assessment will be iitportant considerations, therefore, in efforts to 
understand, measure, or control productuvity in space. 

As in tile case of efficiency, tlie workD.oad carried by an individual 
is imich easier to neasure \*ien the task is primarily' physical than \dien 
it has inajor cognitive ccaotponents. As wierwille et al, (1985) point 
out, a mjor consequence of the increasing autanation of modem systems 
is a shift in the role of the human operator away from manual contzrol 
and tcward monitoring and performance evaluation, and this has 
coirplicated considerably the problem of quantifying the operator's 
workload* Hew can we hope to determine how hard—how close to 
capacity—an individual is working ^en most of ^t he is doing is 
mental activity that is ixrt: directly dDservable? 

Die measurement of mental workload has been recognized by human 
factors researchers as a major challenge to the field and this 
recognition has stimulated considerable activity (Chiles and Allir.ssi, 
1979; Eggemeier, 1980; K&lsbeek, 1968; Moray, 1^79; Parks, 1979; 
aiaridan and Sinpscn, 1979; Singleton et al., 1971; Williges and 
Wiej.wille, 1979) . Work in the area is still in the e}q)loratx)ry and 
formative stages, however, and there has not yet emerged a theory or 
even a widely agreed upon set of concepts aM measurement procedures 
that are needed to provide a sense of stability and coherence. 

An indication of the magnitude of the problem and of the current 
status of work on it is provided in the Proceedings of a NATO 
Conference on Mental Workload published in 1979. Johannsen (1979:3) 
opened t±e conference with the observation that "there exist too many 
conflicting ideas about the definition and measurement of workload", 
and esq^ressed the hope that the conference would produce a consensus 
among participants on a definition and on a procedure for workload 
assessment. In his preface to the conference proceedings, Moray 
(1979: VIII) , the organizer, adknowledgai that these hopes were not 
realized, but noted that participants fmm ^/arious disciplines did come 
to '^^ery similar conclusions about the validity, usefulness, and 
promise (or lack of each) for a wide variety of methods for approaching 
the assessment of workload in the human operator". It is unfortunct:e 
that the proceedings does not contain a summary of these conclusions. 
It does contain, however, a report from each of five participant 
grouqps, classified as eJ5)eriment:al psychology, control engineering, 
mathematical modelling, physiological psychology and applications. 

Ihe e:?)eriment:al psychologists summarized their conclusions this 
way: "The conc^ [mental workload] reflects a genuine dimension or 
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dimensions of human eifperience in daily work. . .it is a ::oncept 
absolxitely required for the adequate analysis and description of such 
tasks [tasks that are not necessarily physically demanding but that are 
experienced as eidiausting and stressful nonetheless] and for 
predictii^g, at the design stage, the future performance of such 
[automatic and semi-autoraatic man-^chine] sysi::ems. . . On the other 
hand the oonc^ is at present very ill-definad with several prbbably 
distinct meanings. . . Biere is no satisfactory theory of "mental 
vrorkload'" (Johannsen et al., 1979:101) . Johannsen et al stress the 
noiltidimensional nature of workload, and deny the appropriateness of 
trying to quantify it as a scalar variable. They specifically rule out 
the possibility of meaningfully comparing different tasks with respect 
to workload, except v^en the tasks are very similar in structure. 

T3ie conclusions drawn fcy the ej^imental psychologists in the NATO 
workshop clearly caution against any ejqjectation that the problem of 
work3.02d measurement will be resolved soon. They are equally clear, 
ho»/ever, in si^porting the view that workload is an essential concept 
If we are to understand the role of hjman beings in modem systems and 
design tasks that iitpose reasonable demands on their capabilities, it 
could prove to be an especially important concept in the context of the 
Space Station because of the unusual cognitive demands that that 
environment will represent. A detailed understanding of those 
demands— insofar as possible in anticipation of the d^loyment of the 
station—surely must be a primary objective of the human factors effort 
in this program. 

One of the approaches that has been used to identify performance 
measures that are sensitive to workload has been to take a variety of 
candidate measures in situations in vMch workload is intentionally 
varied and see which of them vary with workload manipulation (Casali 
and Wierwille, 1983; Hicks and Wierwille, 1979; Wierwille and Connor, 

®^ ' l^S^) • of this work has been done in 

fli^t smulators. Candidate measures that have been studied include 
opinion scales (subjects' ratings of the task in terms of specified 
descriptors) , physiological measures (heart rate, respiration rate, 
pi^il diameter, eye-blink frequency, ©ire-fixation fraction) , measures 
of performance on secondarj tasks (time estimation, tapping 
regularity) , and measures of performance on the primary task. A 
limitation of this approach is that viable measures, at best, reflect 
differences in workload; they do not provide an indication of how hard 
or how close to capacity one is working in any particular case. 

Warj^ of the studies of pilot workload have made use of post flirfit 
qu^ionnaires. Because this approach is heavily dependent on memory, 
Rehmann et al. (1983) e55>lored the possibility of having subjects 
report hrw hard they are working periodically while performing a task. 
Workloaa Dudgements did change in this case with controlled changes in 
task difficulty, but this measurement technique has the disadvantage 
that It could interfere with the performance of the primary task, 
especially vhen the latter is very demanding. 

Ihe introsiveness of the n^easureraent process has been a major 
dra^^ck of many approaches to workload assessment, and especially 
those that make use of a secondary task (Rolfe, 1971; for a summary of 
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nearly 150 stxdies using secondary tasks see Ogden et al. , 1979) . One 
way to avoid the use of an intrusive task and also dependence on the 
subject's meraory is to ironitor physiological indicants of workload that 
can be obtained autoitatically. Isreal et al. (1980) have argued that 
scxae of the physiological measures that have been tried; galvanic skin 
response, heart rate variability, and pupil diameter reflect changes in 
autonomic nervous system activity and so are sensitive to changes in 
emotional state incJ^pejidently of their origin. As a physiological 
measure that is more likely to be indicative unambiguously of changes 
in the cognitive demands of a task, they propose the event-related 
brain potential ard, in particular, its late positive or p300 
ccffiponent* Wickens (1979) also has argued for the use of evoked 
potentials. Isreal et al. (1980) present data from one esqjeriment 
sij^porting the idea that this measure does vary with task demands and 
that cjbtaining it need not interfere with the primary task. While it 
would be iDoprudent to conclude f rm these data that 
electro-physiological monitoring of workload will be effective in the 
Space Station, the possibility deserves further ejqploration. 

Varying workload for e}5)eriinental purposes is probably not feasible 
within the Space Station context, or at least the amount of this type 
of ejqperimentation that can be done will probably be very limited. It 
will be essential to atteitpt to have workloads be as close to ideal as 
they can be made from the very beginning. Of course vAien evidence 
indicates that an initially established workload is not ideal, the 
workload should be changed in the indicated direction, and keeping 
track of such changes can provide some of the data that would have been 
dDtained frm controlled e)q)erimentation. The goal must be to minimize 
the need for such changes, however, vMch requires being able to 
predi.ct the effects of different workloads from data obtained in earth 
environments. 



DEIERMINANIS OF I^WCTDTITI 

There seems to be a consensus among investigators that productivity is 
a function of many variables, and that attempts to affect it that focus 
on one or a small subset of those variables and ignore the others run 
the risk of doing more harm than good (Muckler, 3982; Sutermeister, 
1976) . Among the determinants of productivity that would have to be 
inclioded in any extensive list are the following. 



Human Capabilities and Limitations 

A great deal of information has been compiled about human capabilities 
and limitations and is available in various engineering psychology 
handbooks. What is known in this regard clearly sets bounds on vtiat 
human beings in general can bp, expected to do in specific task 
situations. Individual differences are also germane to the question of 
human productivity. People differ widely with respect to both physical 
and mental capabilities, and the productivity of individuals is bound 
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to vary with the degree to vMdi their individual capabilities match 
the demands of specific tasks. ;^tude testing and job screenim and 
selection procedures are based on these assunptions. 



Task Demands 

Evidence si^rts the intuitively appealing idea that people work best 
when the demands 15x31 them are neither too great nor too small. This 
is one foi-m of the "inverted-U hypothesis" regarding the relationship 
between workload and perfomance, vMch holds that perfonnance of a 
giv^ task is optimal for a workload level that is intermediate between 
one that is excessively hi^ and one that is so low as to promote 
boredom (McGrath, 1965; Welford, 1973, 1974). The detrimental effects 
of overloading are somewhat better documented than are those of 
uMerloading (Weiner, 1975; Weiner et al. 1984) . The possibility that 
underloading can affect performance negatively takes on special 
significance, however, in the context of systems in vhidti humans 
function primarily as siqpervisors of automated processes. 



Motivation 

One can^ hardly doubt that irotivation affects performance, it is clear 
3TL par'ucular that performance suffers vte motivation is very low 
What IS less clear is hew performance is affected wiien motivation 
becxjmes extroiiely high. Modest increases in motivation that is 
iiRLacively low at the outset will almost certainly lead to improved 
perforsanoa, hSz what happens rmm m^/Uvation that is already very hicdi 
-T J^^f^ further? Is t!..>T:j such a ihlr^ o3 trying too hard? 

ijfentii^ too badly to succeed? some investigators believe there is, and 
«iat vftien motivation is e>ctremely hi^ it has a debilitatLna effect. 

^t-T^^l-"^®^ ^?"^ °^ ^ inverted-U hypottiesis mentioned "'above; 
esffi^ that: in this case the performance determinant of interest is 
inoti\^tion rather than task demands. It way be that the detrimental 
effects associated with motivation becaning too hi^ are better 
attributed to and.ety -'er the possibility of failing; fear, especially 
wnen it beaanes panic, undoubtedly :an cause performance to 
deteriOTate. According to this view, if motivation becomes arbitrarily 
hl^ Lut is not acccanpanied by such fear, -vve vrould not necessarily 
ej^ect performance to fall off. The distir^tion between very hi^ 
motiyation and fear of failure may be an In^xirtant one in the Space 
Station context; it would be helpful to have a better understanding of 
the roles of these variables as determinants of piojductivity and 
performance. ^ ^ 



Ehysiological State 

Fatigue has long been recognized as a factor in reducing productivity 
in many settings (Simonson and Weiser, 1976) . Indeed it has been 
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defined operationally as a decrease in performance as a consequence of 
prolonged activity (Kalsbeek, 1971) • Mlich of the research on this 
topic has focused on the problem of scheduling rest breaks in such a 
way as to minimize fatigue (Bechtold et al., 1984; Ganaro and Bechtold, 
1985) . Hie tasks involved in these studies have often been physically 
strenuous and the results are of limited applicability to tasks that 
are primarily cognitive in nature. Exceptions include studies of the 
performance cf aircrews over extended periods (Cameron, 1971, 1973), A 
major question of relevance to productivity in the Space Station is how 
productivity mi^t be affected by the various physiological effects 
that can be ej^jected from prolonged living in the Space Station 
environment. Little is yet known about the physiological consequences 
of livir^ in such environments for longer than a few weeks at a time. 



Training 

Performance, especially of coirplex tasks, obviously iirproves with 
training and practice. An aspect of the relationship between training 
and performance that is especially iiiportant relative to the Space 
Station context has to do with the obscuring of differences by ceiling 
effects. The fact that one has, throuc^ practice, gotten to the point 
of being able to perform a task without error is not coitpelling 
evidence that one has really mastered the task. Ihe true test may come 
when that task ita:ist be performed under stress or in concert with 
coitpeting demands on ones resources. To make the point another way, 
the fact that two peqple perform a given task equally well under 
accommodating conditions is not good evidence that they will perform it 
equally well under stress. 



Capabilities and Limitations of Machines 

Just as the capabilities and limitations of the humans in a conplex 
system help determine the productivity of the system as a v^ole, so do 
the capabilities and limitations of the machines involved. Unlike the 
capabilities of human beings, those of the machines that are a^/ailable 
for use in the Space Station can be ejqpected to evolve even over the 
next few decades. Initial plans for the use of technology in the 
Station take this fact into account. Plans to use artificial 
intelligence, for example, e)q)licitly note the unlikelihood that this 
technology will be used extensively for operational purposes during the 
initial years of the program. However, provision is being made for its 
incorporation as the technology matures to the point of being reliably 
applicable. We would &>cpec± tliat as machine capabilities are extended 
and iirproved, a major consequence would be increcised productivity of 
the Space Station as a whole. Whether this proves to be the case and, 
if so, exactly hew remain to be seen. 



42 



Person-Mcichine Function Allocation 

An iniportant determinant of system procJuctivity, as distinct from both 
hxman productivity and nachlne productivity, inust be the way in vAiich 
system functions are assigned to pecple and to machines. Several 
methods for function allocation have been developed (for a review, see 
Price et al., 1982) ; but none of them is widely used by system 
designers (Mbntemerlo and Cron, 1982; Price, 1985). Investigators have 
argued that it is not realistic to expect it to be feasible to allocate 
function by formula anytime soon, if ever, because the problem is too 
ccarplex and situation-d^jendent (Price and Pulliam, 1983) . Allocations 
typically are made in an ad-hoc fashion on the basis of human jvidgment, 
aided perhaps by efforts of engineering psychologists, beginning with 
Fitts (1951) , to distinguish between generic functions that machines do 
better than people and those that pecple do better than machines. 
While the nuniber of functions that people can perform and machines 
cannot is likely to grow ever smaller with continuing advances in 
machine intelligence, it is likely to be some time before machines can 
matdi people in liheir ability to integrate information in so many forms 
frcaa so many sources; to respond as effectively and adaptively to such 
a wide range of unanticipated situations; to make judgments of 
relevance, reliability and laportanoe; to draw upon a large store of 
caramon sense, as wedl as technical, knowledge; and to follow inprecise 
instructions and work toward hic^-level goals. And if machines acquire 
sudi capabilities in time it does not follow that they should assume 
these functi.ons in all cases. Ttie question of vAiat functions c^ be 
automated and that of vdiat functions should be automated may have 
different answers. This fact has not received the attention it 
deserves. Ihere may be reasons not to automate functions that are 
autcanatable from a technological point of view. These indiode reasons 
of cost effectiveness, human preference, and the need to maintain human 
skills at a hi^ level in rase they are needed in the event of system 
failijre. One ''-xtion that we can presumably assume will be a human 
one indefinit:exy is that of hic^-lwel goal-setting. Value judgments, 
including judgments of wliat goals are worth working toward, will 
hopefully remain the purview of human beings, no matter how clever the 
machines beccane. This probably means also, at least for the 
foreseeable future, retaining the role of deciding to what extent the 
behavior of the clever machines is consistent with those top level 
goals. 



Design of Person-Machine Interfaces 

In very complex systems like the Space station, many functions art^^ 
performed neither by people nor by machines independently, but by 
pecple and machines interactively. This being so, the adequacy of the 
designs of the interfaces throu^ t*dch Information passes between the 
machines and their users will be a major determinant of productivity of 
the pecple, the machines, and the Space station as a vAiole. The design 
challenge for the Space Station is oarplicated by the fact that the 
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intent is to acxxaraaodate a large fraction of the anthrqpometric 
spectrm. It is here, in the design of interfaces, that hunan factors 
researdiers and engineers are likely to have the greatest iirpact on 
productivity. A great deal has been learned about interface design as 
a oonseguence of human factors research in other contexts (Nickerson, 
1986) . A significant getneral conclxision to be drawn frm this research 
is that designers' intuitions uninformed by human factors researrh are 
often wrong. A second similarly general conclusion is that small 
differences in interface design can often have very Icjrge effects. 
Ihis area deserves a great deal of eirphasis in the Space Station 
program. 



Organizational Factors 

Guiin (1982:115) has claini^ that, in the case of manufacturing, the 
major opportunity for improved productivity is not to be realized by 
medianizing the work of making or assembling products, but rather "in 
organizing, sdiedulii^, and managing the total manufacturing 
enterprise. The most important contribution to the productivity of the 
factory offered by new data processing technology is its capability to 
link design, management, and manufacturing into a network of ccanmonly 
available information". Gunn's en^iiasis on the iirportance of a single 
integrated information system, servii^ various needs of a manufacturing 
cperatuon, applies with as much, if not greater, force to the Space 
Station context. ^ Information will be the life blood of the station. 
Hew the information t:hat supports the various functions will be 
organized and accessed will be a critical aspect of the station's 
design. Prdblems of organization, access, i^xiating, protection, and 
representation abound. Hex/ these problems are addressed is certain to 
have implications for productivity, vdiich is not to suggest that those 
inplicatuons will be easy to make e)^licit. 



Scheduling Factors 

Scheduling is a particularly inportant problem for aiy operation that 
involves numerous interdependent processes that proceed partly in 
series and partly concurrently. The problem is exacerbated by the fact 
t:hat an unanticipated delay in the onset or conpletion of any given 
process may have implications for the timing of other processes. Small 
perturbations can ripple and grow int:o major problems producing 
Inefficiencies at best and sometimes serious difficulties. Dynamic 
rescheduling of multi-process operations of aiy ccaiplexity usually 
requires conpjter involvement. Producing the scheduling algorithms, 
however, is still a hunian activity and one that requires a great deal 
of ingenuity, if major inefficiencies are to be avoided. 
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Social ard Interpersonal Factors 

The linkage betv?een social or interpersonal factors and productivity/ 
may be iixiirect, but there can be no doubt of its iitportance. 
Interpersonail difficulties airong people \^lho must wrk cooperatively as 
a groqp can seriously iitpair the sitooth functioning of the groi?); 
conversely, vhen the xr^ibers of the working groiqp genuinely like each 
other and enjoy v^orkliig together, there can be ojually substantive 
positive influences. Interrelationships outside the workirg situation, 
and sudden charges in them, can also have profound effects. A new 
emotional relationship, illness or death of a loved one, an unresolved 
dispute with a friend or acquaintance are obvious cases in point. Such 
factors can affect performance not only throu^ changes in morale or 
motivation, tut also by diverting attention from the demai>ds of one's 
jcfc. 

Hie above list of determinants of performaiK:e could easily be 
ejctended, but it is representative of factors that have been studied. 
Mlxdh is kncwn about how these factors relate to performance and thus 
to productivity in earth environments, i^uch remains to be learned too, 
however., and \diile the themes may s^m familiar, the new context of 
space ghres the prcblems new dimensions. Vlhile all of these factors 
are likely to prove to be inportant in space, none represents a greater 
qpportunit^ and need for research than those that involve the way 
I^qple will relate to and interface with machines, especially in view 
of the rapidity with vdiich the capabilities of the latter aro changing. 



iHE SPACE smrim 

Anticipated Functions and Uses 

Ihe Space Station is e^qjected to serve a variety of functions. These 
inclvide serving as a laboratory for scientific e^qjerimentation ani data 
gathering, manufacturirg and processing of materials (e.g., crystals 
and pharmaceuticals) , servicing of satellite and other space vehicles, 
providing a staging platform for other space mis;sions, and serving as a 
base for constructing large structures for use in space. The station 
is viewed as being iitportant not only to scientific and caranercial 
enterprises but to the further development of space technology. 
Eventually the station is e^ipected to serve as an extraterrestrial 
control and service center for numerous unmanned satellites orbiting in 
a variety of inclinations and altitudes. Serving as a control and 
maintenance center would incliide deploying, retrieviig, repairing, and 
reconfiguring other satellites or spacecraft (JSC, 1979, NASA-ASEE, 
1985) . Considerable interest has also focused on the ro}e the Space 
Station could play as a developovent and evaluation platform for 
autcmation, robotics, kncwledge-based systems and other emerging 
technologies that make intensive use of ccanputer-based resources. 
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Preliminary Design and Operation Considerations 

Bie station is ©qpected to evolve in at least two ways. As a physical 
plant it vdll increase in size and beccane more cxarplex: as modules a^-e 
a:Msd and desirable modifications are identified. Operating procedures 
will also ciiange as a oonsequenoe both of ei^jerience gained in 
operating it and of technological developents. In the interest of 
facilitatijig the svolution of the physical plant as new desiderata are 
identified, cJesign plans call for modularity and ej^JMidability. 

Bie living-workiiig modules are an interconnected set of 4 
pressurized cylinders, each of vMch measures 35-40 feet in length and 
15 feet in diameter. The sizes of the modules are constrained by the 
requirement that at least the initial ones be prefabricated to fit in 
the cargo bay of the space shuttle. Two of these modules are to be 
living quarters and two are to be laboratories. Es.ch living module 
will acccsnDaodate 6-8 people. A fifth module similar in design is 
called a logistics module and will be used for transporting equipment 
and sqcplies between earth and the station. Each of the modules is 
equipped with detachable units to facilitate reconfiguration, servicinci 
and replacement. 

Safety is, of course, a major concern. And this prxiblem has the 
added dimension that mishaps that would have relatively minor 
cjcnsequences on earth could be disastrous in space. Ihe possibility of 
fire in the spacecraft is a major worry for obvious reasons. Ihis 
concern dictates many aspects of spacecraft design. Among the safety 
provisions that have been specified in preliminary design documents 
are: safe exit frm any of the pressurized modules; isolatability of 
each module frcm the others; sufficient food, waste management, control 
and comraunications, and life su^jport facilities in any three-module 
cluster to sustain crew and malce rescue possible. Concern for safety 
also dictates that much of the training regimen focus on possible 
malfunctions. 

In addition to the issue of safety, that of habitability is 
receiving considerable at±ention (Clwjrwater, 1985; Clearwater and 
Kasper, 1986) . Biis issue becomes much more itnportant for missions of 
extended periods than for thode of a few days' duration (Wise 1985, 
1986) . The question is how to use color, texture, lifting, spatial 
arrangements, window plaoemsnts, and other design features, within the 
constraints of other requirements, to make the various Space Station 
modules, and especially the living modules, pleasant places in which to 
spend long periods of time. 

It is intended that the Space Station be as self-contained as 
possible. Consequently, much attention is. being given to recycling of 
sv^lies, such as water, and to on-orbit maintenance and repair. 
Because the kind of constant and extensive ground control monitoring 
that has characterized short duration missions is not feasible for a 
permanent station, much attention is also being given to the objective 
of giving the station crew a hi^ degree of autonomy and independence 
in its day-to-day operation. And because the intent is to make the 
station attjractive to the private sector and usefta for commercial 
ventures, the operating policies will have to take account of the 
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desires of the station's clientele. There is a strong interest in 
assuring human productivity in the Space Station environment, vMch 
stems in part from the anticipated hi^ cost of iranned fli^t. 



Uniqueness of the Space Station 

Nev^Q, in the preceding paper, has hi^i^ted thirteen "hard 
constraints" that may be expected to hold independently of the 
specifics of the station's design* The list makes clear the enormous 
challenge the Space Station program represents* It also points jjp the 
fact that the uniqueness of the space station environment stems not so 
much from any given constraint or small subset of them, but from the 
set as a vdiole* For any given constraint, one can point to one or more 
other environments or situations with vMdi we have some exy^xience 
that shares it (e.g. nuclear submarines, submersible laboratories, 
cpff-shore cpil platforms, polar excursions, scuba and deep-sea diving, 
incarceration— prisoners of war^aM time spent at sea by shipwreck 
survivors) . Some of these environments or situations share several of 
the constraints in Newell's list, but none of them shares the entire 
set* This is an i3ipo2±ant poinc. Suggestive evidence regarding the 
ej^^ected effects of some specific constraints in the Space Station may 
be found in the results of studies of other environments that share 
those constraints; and situations that have been studied include 
extended submarine patrols (Weybrew, 1961; 1963) and wintering-over 
parties in the Arctic and Antarctic (Gunderson, 1963, 1974; Gunderson 
and Nelson, 1963) • But extrapolating what is known about the effects 
of any given constraint or even small subsets of them may overlook 
irrportant effects of interactions. It is not prudent to assurte, in the 
absence of si^^portive evidence, that the effects will sitrply add* It 
is easy to imagine conditions lander xMcih constraints that individually 
would have minor effects would, in combination, produce major ones* 

Ifeny of the constraints in Newell' . list have iirplications for 
productivilY/ either directly or indirectly throu^, say, morale* 
Multi-month crew residences and infrequent physical communication 
outside the station, for exarrple, could result in feelings of 
isolation, deprivation or boredom, or interpersonal tensions among the 
personnel. Limited resources and space could became vmcomfortably 
restrictive in time. Wei^tlessness can produce nausea, headache, 
stuffiness and other physical discomforts, as wall as spatial 
disorientation . 

If challenged to extend Newell 's list of constraints to incorporate 
other characteristics of the Space Station environment that are likely 
to be especially impo2±ant from the point of viev/ of prtxiuctivitY, my 
candidates for consideration would include the followjr/:/ 

® Hi^ degr^ of interactivity, and especially cognitive coupling, 

between crew and equipment. 
© Ctorrputer mediation of control actions and displays. 
® Criticality of information systems. 
0 Need for aiding or augmenting of human thirfdng for 
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troubleshootii^ and decision making. 

• IitporJ-ance of human-machine interface designs. 
© Need for continual concern for safety. 

• Need for ability to deal with unanticipated contingencies. 

9 Sharai responsibility of fli^t-^ntrol decisions between ground 
and fli^t crews. 

• Need for scane operating procedures and principles to be 
negotiated with custcmers; in some cases, perhaps, viiile in 
orbit. 

9 Heterogeneity of Space Station inhabitants (different languages, 
different v:uLtures, different professions, different amounts of 
techni 1 training and f li^t e35)erience) . 

o Irtport .ice of satisfying ways for inhabitants to spend fr-^^ 
time. 

9 Stress. 

Each of these ciharacteristics deserves attention as a variable that 
could have significant iiiplications for productivity. Consider, for 
exaiiple, the second one. In the Space station most of the control 
actions that are identified by humans will actually be effected by 
oonpiters and most of the iriformation provided to the himan operators 
will be provided via conpiter-generated displays. Focusing only on 
displays, for the moment, it is easy to see how the ubiquitous conp.-'.ter 
mediation r^resents an in^jortant departure from more conventional 
displays, a major concern in the operation of any high performance 
vehicle is that of keying the operator (s) aware of those aspects of 
the system's state that are critical to its operation. In conventional 
aircraft most indications of system state (altitude, bearing, airspeed, 
fuel reserve, etc.) are indicated by fixed displays each of which is 
dedicated to a particular indicant; v^en the pilot wants to check the 
plane's altitude, he looks at the altimeter, which is always in the 
same spot and displays always and only altitude: a little area of the 
cockpit is totally dedicated to the objective of keeping the pilot 
aware of how far off the ground he is. In the Space Station, most of 
the information that cre-y members receive will be delivered on computer 
driven displays that are used for more than one purpose. Display 
functions that were once iitplemented in hardware will now be 
irtplemented in software, and the type of information that is available 
IT a specific ^t on a control console will vary from time to time, 
depending on ;*iat piece of software is controllina the display device 
at the moment. This shift from hardware to software implementation of 
display functions has some iitplications for the problem of keeping crew 
members aware of system state. 



ProductiviiY in the Space Station 

Productivity can have several connotations relative to the Space 
Station. It can refer to the ijipact of the Space Station program as a 
v^ole on the GNP or GWP. It can refer to the use of the Space Station 
by industry in production and manufacturing, it can refer to the 
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performance of individual humans or person-inachine coiplexes. Also, 
there iray be a diversity of goals relating to the measurenent and 
control of productivity in the Space Station. It may be desirable, for 
exanrole, to measure the productivity of an individual, a person-machine 
system, a team, or an entire station over scare specified period of 
time. Qt» goal mi^t be to achieve sceais targeted prxxiuctivity r-^ 
average over extended durations. Another mi^t involve being ab7.e to 
achieve peak productivity for short periods \*ien needed. 



Inpact on National or Worldwide Productivity 

Considerable eit^iasis is being put on the potential ccarat^ial uses of 
the Space Station srd. the assumition that it will have beneficial 
long-range effects on the econcmy of the participating nations. The 
1986 r^rt of the National Ccaranission on Space, Pioneering the Space 
Frontier, prqpcses that the space program have three 
mutually-si^portive thrusts: 

@ Advancing our understanding of our planet, our Solar System, and 
the IMverse; 

® E}$)loring, prospecting, and settling the Solar System; 
® Stimulating space enterprises for the direct benefit of the 
people on Earth (p. 5) . 

The third of these thrusts is directly relevant to the idea that the 
space program could have inplications for national and international 
productivity. 

Whether productivity gains will be realized will depend, of course, 
on vdiether the savings due to better quality control more than offset 
the cost of getting materials to and from space and any other increases 
resulting frm conducting the operations in a space environment. To 
have a significant inpact on national or international prxaductivity 
will require a continuing operation of considerable size. The inpact 
on certain industries could be significant relatively quickly, however. 
If the cost effectiveness of space-based manufacturing is conclusivelv' 
demonstrated. 

Ihe space program could also affect productivity on ear ch in a 
variety of ways. Ejqjloration of the earth's atamosjiiere and surface 
with photography (e.g. lANDSAT) and other sensors can produce 
information that can affect productivity by producing a better 
understanding of weather patterns, energy sources, climatic trends, and 
so on. 



Industrial Productivity in Space 

Ihe combination of zero-G and vacuum in space is expectied to facilitate 
production processes for which it is critically inportant to control 
for convection forces or airborne impurities. Among the materials and 
products tiat are of interest in this context are "shaped crystals. 
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send--oorx3uctors, pharmaceiiticals, biologicals, strategic materials, 
plastics, films, oils, alloys and mixtures, ultra pure metals, 
cxaiposites, glasses, itenibranes, metal foam, fibers, microspheres, 
ceramic/^tal, and matrix materials" (NASA-ASE, 1985:9) . A major 
industrial interest in space is the prospect of growing si^jerpure 
crystals (e.g. gallitmi arsenide) for semiconductors in an environment 
free of oonvective turbulences. Interest in conducting such operations 
in space stems frm the assuirption that the quality of the products 
will be much easier to control (Chaudhari, 1986) . It is ejq^ected to be 
possible to grew much larger crystals, for example, and to have a much 
smaller reject rate. 



Individual Productivity in Space 

Individual productivity the effectiveness and efficiency with vfeLch the 
individual participants in the Space Station program carry out their 
assignments is of special interest to the human factors coraraunity, 
inasmuch as the other types of productivity are contingent to no small 
degree on hew well individuals function in their various roles. All of 
the determinants of productivity mentioned earlier in this chapter 
represent important considerations for the Space Station, as they do 
for any ccomplex system. Hie following are also among the more 
significant issues relating to individual productivity that are verv 
likely to arise in this context. 

o Redundancy ard badap: Many of the functions performed by the 
Space Station crew will be sufficiently important that provision 
will have to be made for backi^) in case an individual becomes 
incapacitated, l^e necessity to rely on bacOap capabilities 
could have implications for productivity, depending on the 
adequacy of the bacdaq? procedures and the extent to \Aiich 
reliance on them has a ripple effect t j other functions. 

0 Use of aids, intelligent and otherwise: There will be a need in 
the Space Station t:o augment human cognitive abilities in 
various ways. Decision-maldng aids, t:roubleshooting aids, 
memory aids, will be needed in various cont:exts. 

o Error recovery: It must be assumed that in a manned Space 
Station human errors will occur. The standard approach to 
ininimize disastrous consequences arising from such errors is (1) 
to atterrpt to build in fail-safe procedures so as to make it 
difficult to commit the errors in the first place and (2) to 
buffer operat:or actions— postponing their effects— so that v*ien 
an error is ma,de, there is an qpportiinity t:o correct it. There 
is an obvious tradeoff here between safety and short-term 
productivity. Fail-safe procedures and provisions for failure 
recovery are likely tx> slew operations dovm. In the long run, 
hcwever, their costs may be more than offset by vdiat they save 
if they prevent errors with serious consequences. 
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Inf eolation accessibility: The operation of the Space Station 
is ej^jecfced to be hi^y procedurized. While crew raernbers may 
be assumed to have had extensive training in how to deal with 
various contingencies tl at may arise, it is not safe to assume 
that all the information they will ever need is stored in their 
heads. Availability of precisely the ri^t information at 
specific moments could prove critical not only to prodactivily, 
but in some instances to safely or even survival. A recent 
r^rt from a NASA sponsored workshcjp identifies a system that 
e^lains or assists in the use of other tools as perhaps thv. 
single most inportant tool from the staw^int of EVA autonomy 
and recommends the develcpnent of a real-time maintenance 
information retrieval system that could provide astronauts 
information on demand relating to EVA tasks as they are beim 
performed (NASA-ASEE, 1985). 

Life-support systems: Althou^ very great progress has been made 
in iitproving the design of space suits over the years of the 
space program, the suits currently in use for extra-vehicular- 
activity still greatly restrict the wearer in various ways. 

Morale: Excepting complications arising from ination sickness, 
morale has not been a major problem affecting performance of 
crews in fli^t in the space program ttvms far. But the 
publicity surrounding the. flints and the r^ative brevity of 
their durations have probably sufficed to keep the morale 
generally hi^. When people are in space for months at a time 
and the work becones less of an adventure and more of a job, it 
will not be surprising if morale becomes an issue, and one that 
could affect productivity, from time to time. 

m addressing f-hese and related issues, it is useful to bear in mind 
that vdule the Space Station will dj.f f er frcan other tatvironments in 
numerous ways, many of the issues that relate to productivity in this 
environment are of motie general interest because of their relevance to 
earth environments as well, ihe question of how various types of 
information are best represented on coitputer-driven displays is a very 
general one, for example. And it takes on considerable practical 
significance in view of the fact that 40 to 50 percent of all American 
workers are repeated to be using electronic terminal equipment on a 
daily basis by 1990 (Giuliano, 1982) . Unquestionably designers of 
Space Station displays should benefit from the many ongoing efforts to 
package information more effectively for use in office, industrial, and 
ether earthbound contextfj; we ei^ject also, however, that efforts to get 
the Space station displays just ri^t~beca.Tse being almost ri^t may 
not be good enou^ in tliis context— will yield knowledge about display 
design that will ad^.'ance the state of the art in a general way. 
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Ihe Evolving Role of Humans in Space 

Ihere has been and continues to be a debate about the advantages and 
disadvantages of a space program that includes manned spacecraft as 
opposed to one that does iwt. Ohat debate mil not be rehearsed here, 
beyond noting that opponents of a manned program have argued that 
having humans in space is unr^cessary for many aspects of space 
exploration and providj.ng for their safety delays the prxsgram and 
iiKxceases its costs (e.g. Van Allen, 1986a, b) vdiereas prqponents of a 
manned program have presented a variety of arguments in favor of it, 
among them our inabilily to provide machines vdth some human abilities 
that are seen as critical, especially in res^xanding to vmanticipated 
events. Of particular relevance in the pres^it context is the argument 
that has been node that the presence of humans in space will contribute 
positively to the productivity of the program as a v*iole= In this 
paper a manned program is tal:en as given. Ihe prdblem then becomes 
that of designing a Space Station environment and operating procedures 
that will insitte both the safety of the crew and the success of its 
missions. 

Ihe human's role in space has ej^anded and diversified over the life 
of the space program (loftus et al., 1982) . In the earliest flints 
the role was primarily that of passenger in a highly automated or 
ground-controlled vehicle. As es^arience was gained and the flints 
became more ambitious the crews took on more of the responsibility of 
piloting the spacecraft, still later, the crew's role was enlarged to 
include functions vmrelated to piloting, such as performing scientific 
ej^jeriments and repairing malfunctioning equipment. 

Specific tasks that have been performed by crew members include 
monitoring or the various spacecraft subsystems (guidance and control, 
propulsion, environmental control, and life si^port) ; guidance and 
control during rendezvous and docking; landing and taking-off of lunar 
module (about 10, 000 key strokes are required to conpleta all elements 
of a lunar landiiig mission, according to loftus et al. , 1S82) ; 
assembly, maintenance and repair (especially of scientific 
instruments) ; aiming of scientific instruments and conducting of 
e}5>eriinents; monitoring of data quality; and housekeeping. 

Ihe ability of the crew to perform maintenance and repair operations 
and to handle unexpected subsystem failures of various types has been 
demonstrated in several missions, inclviding Gemini, Apollo 13, Skylab, 
and Spacalab (Garriott, 1974; Garriott et al., 1984). Especially in 
the Skylab and Spacelab programs crewnen on numerous occasions were 
able to r^ir malfunctioning equipment that was esseiitial to the 
planned experiments. As Garriott et al. (1984) have suggested, the 
iinportance of the function should be reflected in the trainijig of the 
crew designed to familiarize them with the equipment and how to repair 

Ihe ways in which the crevra participated in the research activities 
of the Sl?ylab and Spacelab programs have also been reviewed by Garriott 
(1974) and Garriott et al. (1984) . An iiiportant idea emerging from 
these reviews is the following one. To the extent that crew members 
are to act in behalf of scientific investigators located on the ground. 
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this function may go more satisfactorily if there has been iriore 
q^portunity for the crew nisanbers to work with the scientists prior to 
the space mission. 

As the human »s role has es^jandai and diversified, the need for 
specialized capabilities and talents on space crews has increased, and 
consequently the crew members are less and less interchangeable. In the 
Shuttle program, specialization is recognized e}q)licitly in the 
terminology, which distinguishes between mission specialists aM 
payload specialists. In prolonged flints, like those anticipated for 
the Space Station, there will be an even greater need for certain 
specialized skills than has been the case heretofore, it may be 
necessary, for practical reasons, to have specialists \Aio are also able 
to function effectively as crew members outside their area of 
specialty. 

An iitportant problem in planning the crew requirements for the Space 
Station will be that of assuring that collectively the crew has all the 
knowledge and skills that success and safety will require. What is 
difficult about this task is specifying the knowledge and ingenuity 
that will be required to deal with vdiatever une>5)ected contingencies 
arise. While it is not possible, of course, to anticipate everything 
tha t co uld happen, one step that can be taken in this direction is to 
attempt to identify the major types of problems that could arise (e.g. 
problems in the station's electrical system, medical problems among the 
crew, G(cc.) and to make sure that there is esqpertise within the crew to 
deal with problems in those areas. 

Some of the activities the Space Station's crew will perform will 
take place outside the sp-cecraft. Such extravehicular activities 
(EVAs) may incliide the cihangirg of focal planes and other servicing of 
the Hubble Space Telescope (HST) , the Gamma Ray Observatory (GRD) , the 
Advanced X-Ray Astronomy Facility (AXAF) , and the Shuttle Infrared 
Telescope Facility (SIRECF) . (For a tabular summary of extravehicular 
activity on spacefli^ts throu^ the S]<ylab III, see loftus et al., 
1982.) A major component of the cost of EVA activity stems from the 
large amount of time required to make the transition from the 
environment inside a pressurized space capsule to that outside it 
(Howard et al., 1982). Pressure inside the Space Station is 14.7 psi; 
that in the pressurized suit is 4.3 psi (King and Rouen, 1982) . 
Because of the magnitude of this difference it is necessary for 
astronauts, in order to avoid the bends, to clear out the nitrogen in 
their body tissues by breathing pure oxygen for 3 or 4 hours before 
exiting the spacecraft. Hiis procedure could be eliminated if the 
pressure maintained by the suit were above approximately half that 
naintained inside the cabin; thus immediate exit upon donning a space 
suit would be possible if either suits were designed to maintain 8 psi 
and cabins were kepi at 14.7 psi as they currently are or cabin 
pressure was maintained at about 8 psi and suits at 4.3 psi, as they 
now are (NASA-ASEE, 1985) . 

Extravehicular activity represents a special challenge with respect 
to productivity for a variety of reasons, including the following: 

© Severe constraints on mobility and dexterity inposed by the 
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pressurized space suit, 
e Limited visibility due in part to restrictions on head movements 

froia the helitet and space suit, 
o Qrnatly reduced tactile feedback to the hands because of 

pressurized gloves. 

• Free floating or tethered (and easily tangled) tools. 
0 Limited voice communication with in-station crew. 

• Problems associated with personal hygiene and comfort; most 
i^erious perhaps are the problems of defecation for males aM 
defecation ajnd urination for females, but the general prtiblem 
si^rfaces in numerous other, perhaps less serious, guises as 
well: it is very difficult to scratdi one's nose or any other 
itch in an EVA suit. 

o Problems of eating and drinking. 

To the degree that the Space Station is an automated system that is 
monitored by human beings and dependent on manual override in case of 
subsystem malfunctions, it will pose the same kinds of challenge as 
other systems of this type. One such challenge is that of assuring 
that the human monitors are adequate to the task. The monitoring aM 
controlling of ^^namic systems are quite different tasks, and there is 
some evidence that people who have not had ej^jerience as manual 
controllers are less effective at detecting small changes in system 
dynamics than are those \iho have (Efessel and Wickens, 1983; Wickens 
and Kfessel, 1979, 1980; Young, 1969). Another challenge relates to the 
dependence on hman monitors for back vp in case of system failxire, axYi 
that is the problem of maintaining the himian skills needed to perform 
conplex functions that are very seldom performed under normal operating 
conditions. Ha/ does one keep crew members hi^y skilled at corrplex 
tasks that they seldom, if ever, have to perform? AccorxJinq to Jones 
et al., (1972), the most important functions aboard present/ spacecraft 
involve diagnosis and decision making, and retention of diagnostic and 
decision maJdng skills r^resents our greatest gap in knowledge about 
task retention at the present time. 

A major challenge for extended space missions, especially those 
involving long periods of time simply getting to a destination (e.g. 
interplanetary travel) will be to keep a crew and other inhabitants of 
the space vehicle occupied in meaningful ways vAien there is little 
essential work relating to piloting or maintenance of the vehicle to be 
done. Vfork that is invented just for the sake of killing time is 
unlikely to be very satisfying. It will be important for individuals 
to perceive their tasks as serving son^ useful purpose. Some time will 
have to be spent in doing housekeeping chores and some will be viev;ed 
as leisure, but it will undoubtedly prove to be necessary to have 
significant fractions of most days occiqpied with activities that are 
perceived as iirportant to the mission or to other valued goals. 
Scientific experimentation aiid research could occupy much of tids time, 
at least for those individuals ;dio are scientists by profession or v*io 
would derive satisfaction from participating in scientific work. 

The problem of leisure time is considerably more coirplicated for 
extended missions than for those of short duration. In the former 
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case, one must be coiKsmed not only with provision of short periocSs of 
free tima at frequent intervals (e.g. dally) but also with the need for 
scanething analogous to holidays or weekends and vacations on earth, and 
with the question of how to ensure that individuals find it possible to 
spend that tiine to good advantage both from their point of view and 
that of the mission. 



The Close Coi^jling of Iftmans and Conpiters 

In 1983, the Space Systems Division of the NASA Office of Aeronautics 
and Space Technology convened a summer workshop (co-sponsored by the 
American Society for Engineering Education) at Stanford University to 
stiKfy the role of autoncsity in space. The wrkshqp report was issued in 
1985, and has been referenced here as NASA-ASEE, 1985. Participants in 
the workshop included professors from universities acrtjss the country. 
"The workshop sou^t to generate ireccsoratnendations on autonomous systems 
and human functions as well as on a space technology program directed 
toward 

symbiotic vise of machines and humans" "The principle objectives of 

the 1983 summer stud/ were to examine interactions of humans and hi^y 
autoanated systems in the context of specific tasks envisioned for the 
space station, to search for optimum combinations of humans and 
machines, and to develop methodologies for selecting human-machine 
systems" (NASA-ASEE, 1985:2). 

Participants in the workshop condvided from their study "that 
macMnes v;ill not rqjlace humans in space and that artificial 
intelligence (AI) systems will not have major iitpact on initial station 
design." To be sure, some aspects of the operation of the Space 
Station— maintenance of orientation, control of in-station environment, 
pointing of antennas and solar panels—will be done coitpletely 
autcanatically, at least under normal circumstances. Moreover, the role 
of autcanation and artificial, intelligence will increase as these 
technologies mature. But for the foreseeable future, and peiAiaps 
indefinitely, a great many aspects of the operation of the Station and 
of the performance of various missions will require the interaction of 
people with machines. 

An increasingly caramon mode of interaction will involve si5)ervisory 
control, vdiich is viewed by some as intermediate between the use of 
telecperators on the one hand, and rcbot-R on the other (Thiel and 
Rirtzman, 1983) . In the case of teleoperators, the human has a 
"virtual" hands-on relationship but at a distance, as it were. In the 
case of robots, the relationship is of a qualitatively different type 
and may be remote both with respect to distance and time. The rdDot is 
given a capability by its designer to function relatively autonomously, 
albeit in accordance with prirK::,ples incorporated in its design. In 
the case of si^jervisory control, the human is linked to the machine in 
real-time, but controls its operation only at a relatively hi^ level. 
The human provides generic commands, which the system then translates 
into lower-level cornmands to the effectors that will, if all goes well, 
get the job done. How generic the coratnancas are that the human operator 
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prov.-'des depsnds on the systein. Ihe hi^er the level, the caoser one 
ccroes to robotics, and at soine point the distinc±ion between the two 
inodes disappears. 

Ihe fact that so many of the functions in the Space station will be 
performed by people and machines in interaction means that the design 
of the various workstations and person-itachine interfaces will be of 
central iitporl-ance. There exists a substantial literature, much of it 
in design-guide form, that is hi^y relevant to this problem and that 
should be a major resource for designers of Space Station workstations 
and displays. But because the Space Station will be extending the 
frontiers of technology in several ways, designers will also have to 
consider questions for vMch answers have not yet found their way into 
design guides, and in some cases may not have yet been asked. 
Moreover, as Loftus et al. (1982) point out, the ultimate design 
objective of any manned spacefli^t program is never that of optimizing 
the crew-to-spacecraft interface, but rather that of achieving overall 
pi'ogram effectiveness; and given the numerous constraints within which 
such programs must function, this may mean that ooirpromises will be 
necessary in various interface designs. Decisions about such 
conpromises, and selections among various possible tradeoffs, should be 
made with the best landerstanding possible of their implications. 

Among the issues relating to workstation and interface design that 
will be of special concern in the Space Station context are the 
following: 

• How to design multifunction irpat-output devices so as to 
preclude confusion among functions. 

• How to Lay out the various display and iiput devices so as to 
ensure ease of location, interpretation and ^ose. 

• How to design the control and feedback interfaces for 
teleoperator systems. 

• Hew to design the various irpit-out^xit procedures (comraand and 
query languages, menus, abbreviations, symbols) so as to 
maximize their usefulness and minimize human error. 

Many of the human factors issues irelating to the design of 
workstations and interfaces will center on the question of how to get 
information— precisely the ri^t information in a useable format and at 
the appropriate time — from a person to a machine or from a machine to a 
person. So in addition to the important questions of the physical 
designs of displays and input devices, there will be many issues 
relating to the design of methods and procedures for interacting with 
information per se. When will it make sense to use query languages as 
opposed to menus for searchLig a data base? Query languages put a 
greater learning burden on the user than do menus, but probably are 
faster for esqjerienced users, because menus typically force one to go 
all the way down a tree step by step even viien one knows precisely vihat 
one wants to ask at the beginning. 

When menus are used, hew should they be structured? This question 
subsumes a host of others, and althou^ the lower-level questions 
sometimes seem to have intuitively obvious answers, research often 
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reveals them to be more cotplicated than they appear. Consider the 
apparently simple matter of deciding how many items to show on a «=inrfie 
node of a menu hierarchy. For a system with a given number of possible 
&n6. points, there is a tradeoff batween the number of options one sees 
at a given node in the hierarchy and the rRmiber of nodes required to 
get frcan the start to the finish. This breadth-versus-depth tradeoff 
has been the focus of some research (Dray et al., 1981; Miller, 1981; 
S^jpala and Salven:^, 1985) . While the results have not led to an 
^equivocal conclusion, there seems to be sane agreemant that menus 

^ (say less than four) tend generally 

to be inefficient (lee and MacGregor, 1985; Seppala and Salvendy, 
1985) . Bie situation is ccsiplicated, however, by the fact that how 
much breadth one can handle effectively will probably depend on how 
much ejqperience one has had with the system. Ihis may be an argument 
in favor of permirting a menu structure to modify itself to match the 
eaqperience level of its user. 

Ito research effort is currently beu^ devoted to the development 
of natural-language front ends for information systems, it seems 
likely that natural language systems with limited but useful capability 
will be ^ailable by the time the Station is operational, ibis is not 
to suggest that the reality of natural language capability vill make 
other modes of interaction djsolete. ihe assuiiption that natural 
language would be the preferred node of interaction with a data base in 
all cases is not beyond question; there is some, evidence that more 
structured and constrained query languages may give si^jerior 
performance in certain instances (Small and weldon, 1983; for a review 
of human factors considerations that pertain to the design of query 
languages, see Ehrenreidh, 1981) . ^ ^ j 

Speech is also beccaning increasingly feasible as a mode of 
cxmnrninication between people and machines and could find at least 
lututed use in the Space station. The technology for synthesizincj 
^eech IS ijrproving steadily and althou^ the best synthetic speech is 
still noticeably different from human speech and typically somewhat 
less intelligible, people get quite good at underetanding it with only 
modest amounts (a few hours) of listening (Schwab et al., 1985) 
geech understanding by comp-.tter is not so far along, but progress 

f"-^"* technology for isolated word recognition 

probably is sufficiently mature to be used in a Space station context, 
and more ambitious uses of speech understanding technology may be 
feasible by the time the Station becomes operational. 



stress and Performance In Space 

Efforts to anticipate how humans will perform on extended space 
missions have focused on certain ways in which the space environment 
differs frca more familiar environmente on earth and on various types 
of stoessors that could have either acute or cumulative long-term 
effe^. Some of the characteristics of the Space station environment 
may themselves be stressors, if not continuously, at least under 
certain conditions. It will be convenient, therefore, to begin this 
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section vdth a brief discussion of stress in general terms and then to 
consider specific environmental characteristics or stressors that mi^t 
be ex£)ected to affect performance and hence productivity significantly. 



Effects of Stress on Performance 

Stress is likely to be a factor in the Space Station and to affect 
productivity in several ways* First, under the best of circumstances 
the Station and its personnel are al^^ays at risk. While we would not 
expect individuals to spend every waking moarent worrying about safety* 
it would be surprising indeed if there were not a constant underlying 
sensitivity to the tenuousness of the situation; triis mi^t be 
considered a type of chronic stress. Second, from time to time, 
individuals or the entire occupancy of the St:atn.on may be stressed 
acutely as a consequence of an imanticipated event or isituaticnal 
change. Hiird, stress may also be caused by factors that are 
relatively long lived, but not necesscirily chronic. These include 
confinement and social isolation, sensory-notor restriction, 
interpersonal frictions, dissatisfactions with certain aspects of one's 
duties or the Station's cperating procedures, and anxietn.es about 
events or sitruations on earth. The list of possibilities is easily 
extended. 

Acxx>rding to Sharit and Salvencfy (1982) myst of the definitions of 
stzress that one finds in the literature reflect biases related to the 
scientific orientation of the writ:ers and fail to capture the 
many-faceted nature of the phenomenon. Fidell (1977) has noted that 
some authors who have writtzen about stzxess have avoided defining the 
term (e.g. Broadbent, 1971; Welford, 1974) presumably on the assunption 
that the word is intmtively meaningful: most of us know vAiat it means 
to be stressed from personal experience. 

In his review of effects of stzress on performance, Fidell (1977) 
classified stressors as physical, physiological, psychological, and 
socia].. Lazarus and Mbnat (1977) used the last three of these 
categories but not the first. ) In the first cat:egory Fidell incl^oded 
thermal (heat, cold, humidity) mechanical (vibration, acceleration, 
fluid pressiore) and sensory (noise, glare, odor, deprivation) and 
ingest:ed or inhaled substances (drugs, noxious fumes, insufficient 
oxygen) . As physiological stressors he listed musculoskeletal fatigue, 
sleep deprivation, age, disease, and illness. As psychological 
stiressors he distinguished between cognitive (infonration or perceptual 
under/overload) and envjtional 1:ypes (fear, anxiety, insecurity, 
frustration) . The socdal stiressors in his list were ocojpational 
factors (e.g. career pressures) organizational structures, major life 
events, axMdijng, and solitude. Fidell also pointed out that stress is 
sametimes thou^t of as an effect and sometimes as a cause. It is 
assumed to be an effect, for exaiiple, of a perceived threat to one's 
safety or the iirposition of a task that exceeds one's ability to 
perform. On the other hand, it is sametimes identified as the cause of 
poor performan^ or of otherwise ine^licable behavior. It is also 
sametimes viewed as the cause of certain types of medical problems such 
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as tilcers, colitis, smd cardiac arriiythmias. 

Effects of stress on performance are not easy to summarize. Mild to 
moderate stcess for short durations can have a beneficial effect in 
many situations, possibly as a consequence of increased alertness and 
the energy spurt that ccsnes with the greater-than-normal production of 
adrenaline and other hormones. Excessive stress can produce 
deterioration of performance. Frequent experience of stressful events 
tends to bs acccmpanied by at^ically hi^ incidence of illness of 
various sorts (Norman et al., 1985) . A relatively unei^jlored aspect of 
effects of stress on performance relates to how performance changes 
after a tenporary stressor has been removed. 

Ihe study of effects of stress is further ccaonplicated by the fact 
that people adapt or accccimodate to stressors, especially if they are 
only moderate in degree and relativeay invariant wer time. Noise, for 
exrottple, can be a stressor, but people. vAio work in a continuously noisy 
environment seem to adapt to it so that its effects as a stressor 
diminish greatly or disappear, unej^jected substantive change in the 
level or characteristics of the r^oise, however, may have disruptive 
effects. 

leventhal and lindsley (1972) distinguish between danger control 
and fear control as two t^jpes of concern that one may have in a 
threatening situation. Ooncam for danger control is focused on the 
threatening situation and on how to rectify it. concern for fear 
control is focused m the fear response and on how to keep it in 
check. Both are legitimate concerns and trainii^ in preparation for 
extended space mii^sions Rhould take both into account. 

Stress is likely to be an inportant factor in the Space Station and 
its effects on productivity could be substantial. Moreover several 
stressors may be operating simultaneously, producing conplex 
interactive effects, and the stressors will be interacting also with 
other variables in ways that cannot be foreseen. In the remainder of 
this section, several of the stressors that could be especially 
iicportant in the Space station environssnt are briefly noted. Exactly 
how these factors, especla.l]y in combination, will affect performance 
and productivity is nc": kncwn; that their affects will be substantive, 
however, seems hic^ily likely. 



Wid^tlessness 

Wei^tlessness has been enfiiasized as a major feature of a spacecrart 
environmeni: that could give rise to physiological problems such as 
altered fluid and electrolyte balances, and deconditioning of specific 
systems such as the cardiovascular, musculoskeletal, metabolic, and 
neuroendocrine systems (Lindsley and Jones, 1972) . Problems of these 
types have not yet been shown to be sufficiently severe to preclude 
prolCTiged space missions; on the other hand, how they will manifest 
themselves in long daracion missions remains to be seen. 

In retrospect many, perhaps most, of the observed short-term eifects 
of wei^tlessness on huaiwn functioning probably were predictable, but 
many of them were not predicted. In thinking about v*iat it would be 
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like in a 'wei^tless environment, one may find it easy to imagine being 
able to float freely in space and fail to realize that it will also be 
dif ficailt to stand on the floor, sit in a chair, or maintain any fixed 
position without restrciints. Who would have thou^t to ask vdiether it 
would be possible to burp? Or vdiether it would be difficult to bend 
down to tie one's shoes? 



Unfamiliar Motion 

Closely related to wei^tlessr^ss are the various types of motion that 
can produce motion sickness (Kennedy, 1972) • Even astronauts vdio have 
had trainiig intended to reduce the probability of motion sickness have 
esqperienced such sickness during space fli^t, usually during the first 
few days of a mission, cdthou^ navisea has typically not precluded crew 
members from carrying out essential activities (Garriott, 1974) . There 
is some indication that dizziness is more likely to be induced in 
situations that permit individuals to move around in large spaces than 
in those in \jhidh they are more confined (Berry, 1969, 1970) . When 
severe, motion sickness can be debilitating. 



Motion Restriction 

On the opposite end of the spectrum from the concern for unfamiliar 
motion is that for motion restriction. A variety of restrictive 
conditions on earth have been studied with a viev/ to determining their 
physiological and psychological effects. These include immobilization 
from a plaster cast, bed rest, and prolonged confinement in submarines, 
space cabin simulators or other chambers (Fraser et al., 1972) . Among 
the most apparent physiological effects of long-term restriction of 
activity appear to be cardiovascular and musculoskelet:al 
deconditioning, including some bone decalcification. Other possible 
effects iriclude electrolyte imbalances and hemolytic anemia. 

As measures that can be taken to prevent or count:er the 
deconditioning effects of motion rest:riction, Fraser et al. (1972) list 
the following: adequat:© free living space (200-'?50 cubic feet per 
person at a minimum, \xp to 600-700 aibic feet per person as the 
"qptimal, maximizing habit:ability in the li^t of other requirements") , 
adequate exercise, applied pressure (t:o control for fluid volume loss 
and orthost::atic intolerance of deconditioning) , artificial gravity 
(seen as expensive and therefore less practical than other approaches) , 
and hormones and dnigs (primarily to control fluid loss) . 



Sensory and Perceptual Restriction 

What is knavn about the effects of sensory axxi perceptrual deprivation 
or rest:riction on human performance has been summarized by Schultz 
(1965) and Zubek (1973) . Eason axxi Harter (1972) have also reviewed 
the literatiire on this tqpic through 1972 and att:enpted to extract from 
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It infoniEtion that would be relevant the prediction of human 
perfoiBBnce in prolonged space fli^t. (Sensory deprivation or 
restriction connotes an absence or marked attenuation of sensory input 
to one or more modalities; perc^tual deprivation or restriction 

2^'?*^°'' ^P^^^®^ ^^^^^^^•) Eason and Harter noted 
ttet tile studies available ifor their rwiew did not include any in 
^ch the period of confinement or isolation exceeded a few weeks. 
Rissian inv^gators have done studies on effects of confinement in 
which subjects spent as long as one year in relatively isolated 
environments but details have not been available. 

nie data trm these studies are f ragnentary at best ard do not 
c^stitute a cdierent set of findings. Results of individual studies 
are often mutually contradictory, some showing negative and some 
positive ef fecU of derivation on subsequent perception or 

f?^? ^ duration space missions, Eason aM 
Hart^ (1972:101) see the findings as "rather heartening, foi they 

SlSo^^n^^S- ^ f °^ perceptual restriction, 

isolation, and confinement are so minor, except in a few instances, 

S 0^?.%^ difficult to demonstrate witii any degree of consistency 
So^r^J^ laboratory to another but often within the same 

Eason and Barter caution against making predictions about an 
astronaut's sensory, perceptual ard motor functions during long-rancre 
mssions on tiie basis of ej?>eriments involving relativeg^short-SS 
isolation. The results of such studies do piSvide a basis for rSsLi 
S^°2LS^^fSf^ directions for research tiiat can be relevar£^ 
l?>^ ^i^^ ^ ^oUd evidence of 

large eff^ of isolation on sensory or motor functions, they would 
S^r^^^ concerns about potential effects in tiie SpacI station 
^ogram. "As it turns out, the results of studies summarized in this 
paper suggest that only minimal and relatively insignificant chames in 
s^ry and irotor function are likely to occi duriS^loS^5u2S?f 
(Eason aM Harter:103) . Eason aixi Harter ?oint out tiiJ? In 
^*^^space flight, boredom from repetition of stStu:.ation may turn 
out to be a more important determinant of performance than sensory 

^ that pasr studies have been 

too Imited 111 various respects to provide a basis for confident 
^dictior^ about possible effects of confinement and isolation in 

^ further study of tiiese variables under conditions 
that will assure the applicability of the results. 'uxoxons 



Sle^ Interference 

Sle^ disturbances and irregularities take many forms, ihe most 
devious departure from a typical sleep-wake cycle is total sleep 
d^rivation-^oing for extended periods of time without any sleep. 
Other types of irregularity include unusual cycles (e.g. 4 hours of 
SS;n J??""^^' ^ ^ the nonial sleep-T/ake 

fc^Sl^®*?; S^^"^, ^ work-in-the-day-sleep-at-night pattern to 
a sle^in-tiie-day-work-at-m^t pattern) , disruption of the ^Si^ of 
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sle^ (fitful or shallow sleep; decrease in stage-3 and stage-4 sleep) 
resulting from environmental disturbances, psychological stress or 
other vmusual factors. Studies of shift workers have shown that 
changing frcm day to ni^t shift typically results in a reduction (1 to 
2 hours) in the duration of the main sleep period, an increase in 
average total amount of sle^ per 24 hour period— <Jue to naps taJven 
outside the main sle^ period and extra sle^ on rest days~and a 
change in the quality of sleep (Akerstedt and Gillberg, 1981; Tilley et 
al., 1981; Tilley et al*, 1982). Indicants of quality inclijde time to 
sle^ onset, number of awakenir>gs, number of body nKJvements, ard number 
of changes in sle^ stage (Johnson et al., 1972). 

Hew sleep disturbances affect performance is not understood vrell. 
Data suggest that sle^ lor>s is likely to have deleterious effects on 
tasks for ^diich sensory stimilation tends to be low and the rate of 
data handling is not under the ixKiividual's control (e.g. monitoring or 
vigilance tasks) and to have less effect on the performance of conplex 
intellectual tasks involving problem solving and logical analysis 
(Johnson et al., 1972) . Sc^xmihat independent of the question of the 
effects of sle^ disturbances on performance is that of their effect on 
iroods and attitudes. Insomnia is often linked to depression, tension, 
and irritability. Whether there is a cause-effect relationship and, if 
so, whic±i way it goes, are not known for certain. 

Determinaxdon of qptimal work-rest cycles vail involve consideration 
of a variety of factors, technological, psychological and social. How 
often and hew long pec^le v;ill need (or want) to sleep will depend in 
part on the demands of their jobs, and in part on the conditions of the 
sleeping environment. Requirements for sleep axe likely to differ from 
person to person. With respect to social factors, there is some 
evidence that crews prefer to be on the same work-rest cycle insofar as 
possible, and work and get along better \Aien this is the case. 

The importance of rast periods interspersed among work touirs has 
been known at least since Taylor's (1947) early studies. Exactly how 
rest breaks should be scheduled, however, or how this should depend on 
the nature of the work being done, has not been established very 
precisely. It is not even clear that it is always c^imal for work 
breaks to occur on a fix^ periodic schedule. 

Any attSiipt to xanderstand the irelationship of sleep disturbances and 
stress will illustrate the problem of distinguishing cause from 
effect. Sleep disturbances, such as those caused by unusual work-rest 
cycles or the need for proloi>ged wakefulness to deal with an emergency 
situation are seen as sources of both physiological and psychological 
stress. On the other hand, stress originating from other sources can 
be the cause of insomnia or other sleep-related difficulties. 



Boredom and Other Motivational Problems 

It is sot^itot paradoxical that one of the major concerns about such a 
risyy venture as extended space fli^t should be a concern about 
boredom. HcMsver, boredom ax)d various attendar:t conplications could be 
among the naost serious problems that have to be faced. Althou^ 
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^ S^^c: ^^-^i^i^ "^^^ ^ ^ °^ (Smith, 
Uvii; ^ ilSS^.^^^^^^ significant prt±,lem for plople 

or STiSi Tr^^'S!^''i^u"^"°^"°^ sdheciuleTfor weeks 

^ ^ believed to have detrimental effects on 

motivation and m^e and to lead to increased Irequencv of ^?aints 
of headache and other physical prtdDletrs. Ihe te^^^o? .tStSn 
to decease over a period of extended conf inein^S a SLT^JSort 

^ ^ ^^^^ e^vironLSs^S? SSj! 
Of S^rSiS'S^v^ ^ ^ motivation include dim;>uaon 
aStSni^ ^ioS ? "^^^^^9^ to engage Li sustained purposeful 
SSSS^ic^rSiS^^-^^^f^ declining motivatio^ a 
SJ^S^ ^ correlate in a decreasing frequency of alrha rfivthm In 
^EE)G vave (Zubek et al. , 1969) . ihis iTan StereSSS f&r 

saae types of cognitive tasks~and in sane cases taS eiS SiS^ 
^rovement in that ability~as a consequence of SSdSTsSSiSal 

?S^n2e^ S?"^^"^- Hbweve5^S3o^S 

iir^L^!!^ possibility that studies that measui performanS under 
tte circuinstances in ;*dLch motivation adrfit be exoectedto 
risk artifactuaJ results by virtue of thfpci^i^nitrtiiS Se 
J^ipantal task itself, if unusual withiS^f SiS^^f L 
Sw^*^^^ and rewardii^ to improve tS^hr^e 
s^3^' motivational state. After revi^ina S^^SnLt 
ii^SST^ ^^^^^^ ^ Stem concluded tSf^ little is 



Social Isolation 



^lation can mean a variety of things. Brownfield (1965) identifies 
te: spatial confinement; s^^aration from per^ns, plaoL S SSL 
ti^t one values hi^y; reduction or restrictiS^of JnS^' 
stmulation; and reduction in the ^^iabili^ and st^Sto of 
stimulation. The first, third and fourth of tSelSSSioL have 
already haan mentioned. Unfortunately, effects!? SlStS Sh^S 

^Tal"^^^'^ of"«n?JSl.?f SS'SsSSion 

S^oS^ ^=^^'=''5^' because these conditions typically occur together- 
^S^St^^? ^ believed that social isolation could^e to S 
ainong the most important stressors isi the context of nroloSS 

, -Z:!-,^^ aiaracteristics of the space environment sucih aci 
sensory iiputs, may lead to an increased frequency of davdrearam- 

«er to withtaw arri h^an. »,re psychological^ r^SS, 
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numbers of the group (Haytiiom et al. , 197?) . According to Sells and 
Gunderson (1972 s 204) , extended isolation and confinement of small 
groups on earth (e.g. at scientific stations in Antarctica) can 
increase the probability of "irritability and depression, sleep 
disturbances, boredom, social withdrawal, dissatisfaction, and 
deterioration in group organization and cohesion". Enriching the 
stiinulus environment can counteract this tendency to some degree, but 
the stimili must be loeaningful and of interest to the people involved. 
Tliere is scBtie evidence that part of the withdrawal conplex is a 
decreased tendency to avail oneself of vAiatever c^jportunities for 
stimulation the environment provides. 

Special problems may arise when an individual especially close to a 
person on an extended itr^ion beccines seriously ill (e.g. a child, 
spouse^ or parent) and it is iitpossible for the person to return to 
earth, or if lananticipated events of major significance occur on earth 
during a prolonged mission. Bie effects of such happenings on 
attitudes and morale cxxild be substantive. It is easy to imagine other 
exassples of events on earth that could prove to be stressors to people 
in space. Inasmuch as coranamication between earth and the station will 
probably be primarily throu^ ground control stations, at least for 
some time, information that could have a detrimental effect on the 
morale of mearibers of the Space Station crew could be withheld from 
them. Consideration of such a policy raises a serious ethical issue, 
hcwever, and would probably not be tolerated in any case. Ihere are 
loaany reasons for maintaining frequent, if not constant, cxmiunication 
with earth. Not least among these is the ner''. for inhabitants of the 
iijtation to corarauiucate frequently with people other than themselves. 



Excessive Workload 

Excessive task demands can be a source of stress and can lead to 
serious performance decrements. When even moderate task demands are 
coupled with the constant possibility of catastrophic errors, long term 
ejqx^sure to the situation can produce a variety of stress-related 
synptoms. One inherently stressful job that has been the focus of 
considerable attention by researchers, and the general public as well, 
is air traffic control (Ooihb and Rose, 1973; Crunp, 1979; Finkelman nnd 
Kirsctoisr, 1981; Hailey, 1968) . Hie stress in this case probably stems 
in large part fkm the facts that i^rrors in performance can result in 
human fatalities and that most aircraft accidents are due to human 
error (Danaher, 1980) . 

Tcisk demands in the Space Station are xxnlikely to be excessive for 
sustained periods of time, although they could be hi^ at critical 
irdssion junctures and could became excessive during emergencies. 
Rirhaps more important is the ever-present possibility of human error 
having a catastrophic result. Every attempt will be made, of course, 
to ensure that the operating procedures are fail-safe and that any 
errors that can be anticipated are recoverable, but some degree of 
unce3rtainty in this regard is bound to remain, and with it some level 
of task-induced stress. 
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Acute Medical Rcobleins 



With respect to the control of medical probleins within a spacecraft 
the emphasis has to be first on prevention (Eraser et al.T?^ ' 

mSirS?ii^?^-^^L^^^.°" long-duration mission is high. 
Within the space station there will be the possibility of manv of the 
^ ™^ °' physical injuries arising frtSlccideite SltT^?^? 
that mi^t occur on earth. In addition there are certain tvS'sT^^ 
inishaps that are relatively unique to the space en^Slit^eS 

°f prolonged e.?«sur« to atypical 
of atanc^eric gases or pressures, e^xDsure tohigh-Z 
particles-hi^ energy particles of hi^ atomic number4>r other forms 

o^SS iS'; resulting from malfunctioning Va 

pressure suit during EVA. Eraser et al note also the cossibii il-i tu^t- 
somemaJical prt^lems that would be very^y to t2^t^2jS%SS 
beccffle significant in space, either because of inSquaS SSnSf 

aS^2^S?ofl^ yr*^® various wc^s in ^dh the bocfy has 
^^f^^ ^"T-"^^ ^ ^® wei^tless environment (e.g. reduction 
in blood volume due to wei^tlessness) . reauccion 



Other Sources of stress 



Oth^ features of space fli^t that could also be problematic include 
the Jsence of normal terrestrial time references, and Ssibl^^S^ 

nfSf^ frm time to time could pose chall^ Sr 
^ir^T^ ^ ?^ ^ spacecraft community. The need for onvacv 

Siil ScS't^ and place wholly to onesSf on a fair^^ 

^^^^ prove especially important in this environment: 
Sharing of sleeping quarters and other personal space over lona ^inds 
of time can increase the frequency and sSiousneS^S SSrS)SS 
fractions. Hab stability of the spacecraft will^c^^^Snce 

JSStST>..';j-?'Ki*^'^^°"^ °^ itdssions.^dSfSJS^ 
StSJ!^ habitable environir^t will also increase with missgn 

staSo^ if particularly iitportant that inhabitants of the Space 
^^!f°lvs' q^cOdy and eqjeditiously, any 

^fdSSif^'SI^^'^- ^^^^ly sel^i^procedures 

mAi disquali^ fran participation in space missions individuals for 
v.ta the probability of interpersonal disputes or fricSSS^ 
determined to be hi^. It wiuS iirporSJt1o?t^SfS^dJ qualify 
to^ive such training as is available regarding S to aSid^^ 

^es^T^^,.^"^' ^ ^ av= 
individuals react differenUy to the ^^me stressors, depending on 
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motivation, familiarity with the situation, appropriateness of 
training, degrse of cxDnfidence in am ability to cx^, degree of 
cx)nfidence in si^porting cxDlleagues and accessible resources, and 
other factors* Ihere is some evidence that the magnitude of 
physiological reaction (e.g. increased pulse rate) to psycho].ogical 
stress is likely to be less for individuals \^o are aerobically fit 
than for those vdio are not (Holmes and Roth, 1985) . Tests that r^rovide 
a reliable indication of how individuals will react to the lypec of 
stressors they are likely to encounter in the Space Station environrnent 
would be useful both for purposes of selection and for identifying 
specific traini2>g needs. Development and validation of such tests are 
worthvMle goals. Similarly, developrrjent of more effective methods of 
increasing tolerances to specific stressors and of itrproving the 
ability of individuals to function effectively in spitie of them shovild 
be continuing objectives. 

loftus et al. (1982:11-34) note that stress does not seem to have 
led to performance degradation so far in the spacefli^t program. They 
attribute failure to observe such degradation "to substantial 
overrcraining of flight crews for the tasks they must perform, diverse 
and interestuiig stimuli present in the real environment contrast:ed with 
ndiiiraum st±tiulation environment in simulations;, and stronger moti^ration 
in fxi^t crews conpared with test subjects". It would be unwise to 
extrapolate the relative unirtportance of stress as a determinant of 
performance in the early space program to the future, however; the mu^i 
longer durations of the missions and the inclusion of participants \Axo 
are not professional ast:ronauts are two major differences that could 
make stress of various types much more consequential. 



CDNCmSIONS AND REaMffiMftTIONS 

Ihe Space Station program is an ambitious x:indertaking. Establishing a 
permanentJ.y manned facility in space will be expensive and risky, but 
the long-range benefits for humankind that could result from success in 
this endeavor are surely very great. Keeping the program moving 
forward without ujpleasant surprises and major set±acks will require 
intensive planning, continual evaluation of plans, replanning based on 
the results of evalmtions, a3id conopulsive att:encion to details of 
countJ.ess typ:)s. 

In the remainder of this paper, I shall identify vAiat appear to me 
to be some of the major needs, especially research needs, relating to 
productivity in the Space Station. At the beginning of this paper, it 
was noted t±iat the term prod^jctivitv is used in a variety of ways and 
oftien without a very precise connotation, and that except in certain 
hi^ily-st:ructured situations, hw to quantify productivity 
\:inambiguously is not clear. If hi^ productivity is to be an explicit 
objective of the ^pace program, some consideration must be given to how 
it is to be meas'ared or otherwise assessed in this cont:ext. Assessment 
will be desir ble at various levels — ^that of the overall Space Station 
program, that of specific missions,, tiiat of specific crews during 
designat:ed periods of time, and tiiat of individuals performing specific 
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tasks. 

For present pttposes, it is assumed that enhancements—increases in 
the erficiency, accuracy, reliability—of the performance of humans or 
human-machine systems are very likely to improve productivity by ne-rly 
any reasonable definition and measurement tecihnique. ihe 
reccanmendations that follow ane predicated on that assumption. 
Research 'that is alluded to in some of these recommendations is already 
underway, in NASA laboratories and elsev^ere. I am aware of some of 
these efforts, but there undoubtedly are many of vdiich I am not. 
Inclusion in this list signifies only my opinion that the topic 
deserv^ attention; if it is getting it already, so much the better. 
While all of these recaramendations are considered important to the 
Space Station program, they are not all uniquely applicable to it. 
Seme of them are similar to recommendations that would apply to the 
design and development of any ccanplex system that will have people 
interacting with coirputer-based tools in non-trivial ways (Nickerson et 
bJl* f 1984) • 

® Oiere is a need to organize the information that has been 
obtained from research on earth or from data gathered in 
previous space flints that is relevant to human performance in 
space. Ihis information should be organized and indexed so as to 
make it hi^y accessible to scientists and engineers in the 
space progrsrn. 

• It wowd be useful also to commission the conpilation of an 
encyclopedia of ignorance about productivity, and performance 
more generally, in space, ihe primary objective should be to 
identify as many as possible of the iiportant unanswered 
questions about performance in space. Questions should be 
prioritized with respect to largency, and classified in terms of 
the kind of research that could lead to answers. 

• What inforruation will be reqiaired by specific members of the 
Space Station team at specific times needs to be determined. 
This includes determining v*iat information should be presented 
spontaneously, and in such a way as to capture the intended 
receiver's attention, \it)at information should be available 
es^jlicitly on some display all (or most) of the time, and v*iat 
information should be available but presented only on request. 

® Possible and most-likely patterns of ccnmiunication or 

information flew both within the Space station and between the 
station and earth need to be understood better. 

9 More ef fecti.ve means of providing EVA access to data-base 
information pertinent to EVA tasks are needed. 

© An Inventory of tasks that pec^le will be ej^jected to perform in 
the Space Station should be corrpiled. 
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Procedure descriptions should be evaluated for accuracy and 
clarity. 

Crit^ia need to established regarding v4iat aspects of the 
Space Station's (^)eration should be autonated. The rule that 
anything that can be automated (effectively, safely) should be 
automated is not necessarily a good rule. There may be some 
functions that can be done acceptably by either people or 
madiines that should be done by people. Issues of inorale, 
perc^jtion of control, and skill maintenance must be considered 
as well as that ^f tedhnical feasibility. 

More research is needed on ttie question of how much 
"intielligence" to build into t::eleqperat:or or tielerdbot systems, 
and how i^och to rely on remotie control by humans. 

The design of ccatputer-based aids for t:rouble shooting, problem 
solving and decision maJdng, arsd of the protx)cols for 
interacting with them deserves considerable attiention. 

Efforts 1:0 advance the state-of-the-art of aiding human 
qperatx5rs throu^ the use of "intelligent", or "e>qpert-syst:em" 
software should be si^ported: potential applications in the 
Space Station program include fault detection, identification, 
and repair; planning and plan revising; and crisis management. 

The knowledge of astronauts aiid space professionals must be 
codified t:o provide the basis for the development of ejqpert 
systems emd knowledge-based aids. 

The phasing of e>q5ert syst:em technology into operational 
sitruations as its evolution ^^/arrants will represent an ongoing 
challenge into the indefinite fut:ure. 
Possible problems involved in having crew members share 
responsibility of hi^-leveJ. cognitive tasks with "smart" 
software or e3q>srt systems need to be identified; policies 
should be established for deciding vdien to trust a syst:em and 
vAien to override it. 

Design of the various int:erfaces thixu^ which Space Station 
;?ersonnel will interact with the numerous syst:ems aM 
subsystems on board is among the most critical problems to be 
solved, from a human factors point of view. There is a bocfy of 
literat:ure relating to the design of worlcstations aM displays 
that should be consult:ed; however, much remains to be learned 
about hew best to represent and present information in various 
Space Station contexts. This tqpic deserves a continuing effort 
of research focused on the identification of display formats, 
information coding dimensions, axxi input t:echniques that are 
especially well suited to the Space Station environment and the 
demands of specific tasks that are to be perfont^. 
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Prcposed or planned displays and work stations should be 
evalxaated in terms of conventional human factors criteria: 
lifting, glare, flicker, contrast, character/symbol 
legibility/interpretabilily, functional-positional 
relationships, clutter, and so on. 

Display configurations and syitibology must be designed and 
evaluated; this includes detemdnation of content and format of 
specific-purpose displays. Display coc 'jig dimensions must be 
selected so as to minimize confusion arising from multiple 
functions of a given display space. 

A better understanding is needed of v^en to vise menus and \Aien 
to use command languages as irput methods. Olie menus and 
languages to be used must be designed, evaluated and refined. 

Iliere is a need to identify situations in which voice could be 
used to advantage as an irput or oulT>ut medium, given the 
probable state-of-the-art of voice recog.ution and production 
technology over the next decade or so. 

Further work is needed on the design of control and feedback 
interfaces for remote manipulators, teleqperators, and 
semi-autonomous systems. The problem is oorplicated v*ien the 
distance between the devices and their operators is great enough 
to cause significant ccanraunication delays. 

The need for hi^ resolution, stereo visual feedback from 
telecperator systems should be studied and the feasibility of 
its use eaqjlored. 

More effective helmet-mounted displays for use in EVA should be 
a continuing research objective. 

Ihe technology for tracking eye fixation and movement, and hand 
and finger position and movement could have applications in the 
Space Station, but ne<jd to be developed further. 

The technology needed to make a virtual-interface approach to 
teleqperator control a practical reality requires further 
'^^loration. 

Acquisition of anthropometric, range of motion, strength, and 
force and torque application data, with and without pressurized 
suits, should be continued- 

Ihe ability to measure and monitor mental workload could be 
useful, especially for the establishment of crew 
responsibilities in the station's day-to-day operation and in 
hi^-activity situations. But techniques that are to be used in 
operational contexts must be unintrusive, and this rules out the 
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applicability of many of those that have been xised to stucJy 
mental workload in the laboratory. 

A catalog of possible human errors (of both comndssion and 
amission) that could have non-trivial consequences in the Space 
Station should be developed; potential errors should be rated as 
to seriousness and prdbability of recurrence, and the results 
used to develop safeguards and errc r detection and recovery 
procedures. 

A detailed stucfy of human errors that are actually made in the 
Space Station environment will be very 'iseful, as it has been in 
other contexts (Meibter, 1966; Swain, 19/0, 1978). 

Methods of assuring the maintenance of critical skills that are 
tiTpically xised only in the event of a system ralfunction or 
failure must be developed. 

Effects of prolonged living in restricted environments on work 
performance, social behavior and mental state deserve further 
study, ^fore specifically, attempts should be made to identify 
aspects of such environments that are the major detenrdnants of 
behavioral, cognitive or emotional effe "ts. 

Special attention should be given to the types of interpersonal 
tensions and conflicts that are likely to arise in the Space 
Station environment and the development of effective techniques 
for relieving or resolving them. 

Ihe question of how to occupy long periods of time during vAiich 
the operational denonds of the spacecraft are minimal deserves 
considerable attention. The maintenance of motivation, 
alertr-ess and social stability during extended stretches of 
being, in essence, passengers on an automatically piloted craft 
represents a significant challenge. 

Presumably, productivity in space can be enhanced by factors 
that ccntribute to the maintenance of high levels of alertness, 
motivation and general physical and mental well being. We need 
to understand better how these variables depend on such factors 
as appropriate diet; tegular physical axercise; the qpportunity 
to engage in interesting and valued activities in free time; 
frequent communication with earthy not only regarding mission 
matters, but regarding those of personal interest; adequate 
variety in job responsibilities; adequate rest; and extensive 
use of error detection and faiJsafe procedures (especially those 
that can be automated) . 

We need also to learn more about the relationships among certain 
performance or psychological variables (attention, vigilance, 
perception, memory, learning, thinking, and judgement) and 
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Indicants of physiological state (EBG, evoked potential, 
contingent negative variation, heart rate, blood pressure, 
respiration, skin temperature, galvanic skin response) . To the 
extent that variables in the latter categoiy can be shown to be 
reliable indicants of the quality of specific types of human 




and using the results of the "itvonitoring to enhance performarce 
in various ways (Johnson et al. , 1972) . Althou^ techniques 
exist for doing such monitoring, they tend to be suf f icienUy 
intrusive to interfere with the monitored individuals' 
performance of their primary tasks and to be less reliable than 
is desired. A continuing goal of research should be the 
develqpient of less iiitrusive and more reliable techniques for 
monitoring cognitive state. 

•Kie ability to monitor— and in particular to detect significant 
cnanges m—physiological and psychological states could prove 
to be especially important in long-term space missions, state 
chaises that could be iitportant to detect include both tenporarv 
fluctuations m alertness and long-range changes in general 
physical condition, motivation and mood. 

Biofeedback technology is still in its infancy, however the 
evidence is clear that people can learn, within limits, to 
control certain physiological functions that had been thou^t to 
be conpletely automatic. Further study of biofeedback 
techniques is warranted with a view to their possible 
application in the Space Station for purposes of controlling 
tension, facilitating good quality sleep, and otherwise tuning 
physiological states to enhcuice either performance or rest. 

Studies of the mental models that crew members or perspective 
crew members develcp of the Space Station and its hardware and 
software conponents could help determine what kinds of models 
are acceptable for conveyance to future participants in Space 
Station missions. 

There is a need for better rapid prototyping capabil^'ties 
especially for prototyping candidate interface designs. 

Procedures and policies must be established for acquiring data 
in ^ce that can be used to relate productivity and performance 
to the numerous variables that are believed to affect them in 
significant ways. 

It is not likely that predictions about performance of humans in 
space can be very accurate very ^ar into the future. A 
rea^nable goal is the development of a predictive r^el, based 
an what is cun^Uy known from data collected on earth and frxati 
studies of performance in space to date, with the intent of 
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modifyljig that inodel contiiTually as further relevant data are 
obta in ed^ especially fern experience in space. Conditions in 
space ejqjloration will change and the durations of stays in 
space will increase, so the laodel will have to evolve to 
aoocmnncdate those changes. On the assunpcion that the changes 
that occur will be evolxitionary and relatively continuous, one 
can hope for a inodel that is hi^y predictive of the situation 
that is current at any given time and reasonably predictive of 
the situation as it is anticipated to be in the nea3>tenu 
future. 
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DISCUSSION: 

CEMMEMIS ON SYSTEM EROEUCTiVi'JLY: PEOPLE MD MACHEKES 



Robert C. Williges 



Nickerson's paper provides an excellent review of human factors 
iirplications when considering productivity in the space station. In an 
atteitpt to aitplify some of his points, I will restrict iiiy comments to 
the ramifications of productivity as espoused in modem industrial 
engineering. As a point of departure, I will use the recent text by 
Sink (1985) on productivity management to discuss topics related to 
defining, ineasuring, and iitproving productivi'cy. 



WHAT IS PI«DDUCTlVr.l'ir? 

In the most general form, productivity in industrial engineering is 
defined as a simple ratio of some quantity of output divided by some 
quantity of iiput. From a systems point-of-view, input quantities 
(e.g., labor^ capital, energy, materials, etc.) go throu^ some 
transfcrroation (e.g. , manufacturing, infomation processing, etc. ) to 
yield an output (e.g., g-^^ods, services, xraste, etc.) as shown in 
Figure 1. By comparing tae output quantity to the input quantity, one 
can assess system productivity as a simple ratio. 

Two inplications are readily apparent from this operational 
definition of productivity. First, productivity is a metric that 
represents more than just output perfonrance. It is a measure of 
output performance relative to irpat riesources. Consequently, 
productivity is but one conponent of performance axvi should not be 
equated with overall perfonnance. Other related system performance 
conponents mi^t include efficiency, effectiveness, innovation, 
quality, profitability, etc. From a human factors point of view, 
productivity has the potential to serve as one metric for evaluating 
humans as conponents in ccatplex space systems. 

A second i^lication of tlie operational definition of productivity 
is that the ratio metric is based on some defined unit of analysis. 
JUst as the Bureau of Labor statistics measure of overall national 
productivity (i.e.. Gross National Product, GNP, divided by labor 
irput) is of limited value, an overall measure of space station 
productivity is limited. Care must be taken to chose a meaningful 
level of analysis in . ' sessing productivity in space sy. stems. From a 
human productivity point-of~view, it my be difficult to distinguish 
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Input Quantity (I) 



Transformation 



Output Quantity (0) 



Productivity (P)=:0/ I 



FIGURE 1 Basic configuration of the productivilY itvetric* 



productiivilY from human performance in cognitive tasks vintil better 
itieasures of input resources, cognitive processes, and output measures 
are available. 

Productivity does, however, seem to be a viable metric to eval\;iate 
larger units of analysis of space-related missions in vMch the 
astronaut is considered one conponent of the unit of analysis. These 
larger units of analysis should be considered in terms of the 
humaiymachine interface level axxT above. For exaitple, the human 
ccaopponent could be considered in assessing the productivity of a space 
station or in assessing productivity of working environments such as 
intravehicular activities (IVA) at workstations, extravehicular 
activities (EVA) outside the space station, and combined IVA and EVA 
operations such as telerdbctic activities (Gillan et al., 1986) . 
each case, the ratio metric of productivity includes human carponents 
along with hardware and software components, and these productivity 
assessments can be used to evaluate the relative contributions of 
various conponents. 



HCW IS ERODaCi'lVi'iY MEASURED? 

Itaditionally, both the time domain and the number of component factors 
measured are considered in calculating the productivity ratio. In the 
time dcsnain, both static and dynamic measures of productivity are 
used. Static measures are used to calculatie the productivity ratio for 
a partiaxlar point in time; ^ereas, dynamic measures are used to 
ev^aluatie ^langes in productivity across a designated time unit. Both 
measures appear to be usefu], in evaluatiiig the productivity of the 
human coitponent in ^ce. Static ratios can be used to assess the 
relative effect of the astronaut in t:erms of training investment and 
performaiice on a particular space mission^ Dynamic productivity indices 
can re used 1:o evalmtie changes in team size, allocation of 
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tasks/functions, and return on investments in automation for soace 
missions. =>t^^ 

Both static and dynamic measures of productivity can vary in their 
c^v^fL^f^i^^ depending upon the number of components measured. 
Sink (1985) , for example, suggests three levels of cctnplexity 
detennuied by the number ox factors used to construct the pmJuctivity 
ratao. He refers to partial-factor, raultif actor, and total-factor 
raeasures. Partial factor measures include only one cottponent class 
(e.g. , mission specialist) ; multifactor measures include several 
cajponent classes (e.g. , mission specialist and conpater interface) ; 
and total-factor measures include all oonponent classes (e.g., mission 
specialist, ccatpiter-interface, test equipment, documentations, etc.) 
included in any particular productivity unit of analysis. Obviously, 
the simple productivity ratio quickly ei?)lodes into a complex, 
multivariate measurement problem once the unit of analysis and number 
of factors of measurement increases. Research is needed, to build and 
evaluate complex productivity measursmsnt systems for assessing human 
components of productivity in space missions. 



HCW CAN EE?DDULTlVriY BE IMPROVED? 



S^.?^ vS^^ '■^'•■^ ^ ^ iJmreased productivity must be 

considered in terms of both input and output quantities and n^t merely 
in t^ of improving output. ConsequeiiUy, productivity improvement 
can be adiieved hi five ways, as shown in Table 1, depending i^n the 
relationship of the input and out^ conditions. Although th£e 
conditions are somewhat restricted \to considering the human 
con5)onent, all appear to be possible if the unit of productivity 
analysis includes human, ha xlware, and software components r^Jated to 
space missions. MbsUy, on± considers human productivity iiiprovement 
in terms of human performance iirprovements as Nickerson suqqests in his 
paper. But the implication of the conditions listed in Table 1 
suggests that these potential human perfojntance improvements (in 
out^) must be evaluated relative to the input changes (e.g., 
increased training, cost of automation, etc.) in order to evaluate the 
real impact on productivity. 



Conditions for Improving ProductivilY (a:eter Sink, 1985) 



Increasiiig Output 

1. Output increases; irput decreases 

2. Oulput increases; input remains constant 

3. Output increases; input increases at a lower rate 
Constant Output 

4. Output constant; iiput decreases 
Decreasing Output 

5. Output decreases; irput decreases at a more rapid rate 
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RESEARCH ISSUES 

ProductivilY fircaa sn industrial engineering point-of-view provides an 
inportant metric for assessing human perfojciance as a systems ccatponent 
in space missions. Human pixxauctivil^ per s<a needs to be considered in 
a systems contesct, and any evalviation of productiviiY ntust assess both 
inpit and output quantities in order to establish a ratio metric. Two 
general areas of productiviiY research in space-related missions appear 
to warrant increased attention. 



Measuring Productivil^ 

Several measurement issues must be addressed before human prxaductivi-t^ 
assessments of space missions can be made. Ihe appropriate lanits of 
analysis for productiviiY measurement must be specified. Crxteria for 
partial-factor, multifactor, and total-factor measures' need to be 
established and verified. Autcanated huroan perfc>rmai'V« assessment 
schemas (Williges, 1977) need to be constxucted wh.ich could then be 
used for embedded performance measurement, evolutionary cperation, 
empirical modeling, multivariate criteria, and realistic data bases 
frcm vMch theoretical extrapolations could be made to the design of a 
varieiY of future ^ce-related tasks. Inproved productiviiy 
measurement models with sophisticated human productiviiY parameters 
need to be developed and validated. Many of these measurement issues 
can be addressed by current multivariate mea^^urement procedures, but 
each of them will require validation during actual space missions. 



Improving ProductiviiY 

Most of the research issues presented in the Nickerson paper dealing 
with performance enhancements can relate to ijiprwing hman 
productiviiY if the antecedent hrpot quantities are evalviated in order 
to establish appropriate productivity indices. The unit of analysis at 
the human-machine interface level or above seems to provide the best 
opportunities for iirproved productiviiY given the characteristics of 
the productiviiY metric. Research issues raised by Nickerson dealing 
with workstation design, hman input modes, decision aj.ds, and 
automation are particularly relevant. In fact., many of the remaining 
topics to be discussed during this synposium are candid te issues that 
could be evaluated in terms of productiviiY improvement inetrics. 



(DONCmsiQN 

ProductiviiY is an often used and abused term. By accepting the rather 
straightforward operational definition of productivity as a ratio of 
output qi^antiti' divided by irput quantii^/ I believe productiviiy holds 
prcanise as an inportant conponent metric of space sta.tion performance 
vAiich include human, hardware, and software parameters. Before such a 
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inetric is useful, several productivity measurement and productivity 
enhancement research issues must be addressed. 
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SYNOPSIS OF GENERAL AUDIENCE DISCUSSION 



Areas of Concern 

Two aspects of the space station provide different concerns for 
evaluating hiiman productivilY* Housekeeping activities may prove to be 
an ±3portant candidate for productivity iitpravement in terms of 
reducing the ainount of time required to perform these functions. 
Another major cortponent of the space station is the conduct of 
scientific activities. iJiproving productivity related to space 
research activities appear to be more difficult to measure. In 
addition to 'on orbit' space st:ation concerns, the integration of 
ground-control and on-board activities is a prime candidatie for 
productivity improveinent studies. 



Productivity Metrics 

Several of the carrponentzs related to human productivity in space will 
be difficult to quantify. Consequently, the accuracy and viability of 
these measures may be sornewhat questionable at certain units of 
analysis. This underscores the appropriatie choice of the unit of 
analysis. In addition, qualit:ative measures may need to be substit^ited 
for quantitative measures in certain instances. 



Lessons learned 

Analysis of otlier isolated, long duration mi.ssions such as early 
warning systems and sea lab may be useful in making assunptdons and 
generating initieil models of key patBmeters relat:ed to productivity for 
space-relatred inissions. For exaitple, isolations may be a catalyst to 
trigger stress factors affecting productivity. Cautdon, needs to be 
exercised in extrapolating from these analogs, because clear 
differences exist. Nonetheless, evaluation of these relat:ed systems 
may be useful in isolating a common thread of critical variables 
affecting human productivity. 
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AI SYSTEMS IN THE SPACE STATION 



Thomas M. Mitchell 



INTRODUCTION 

Among the tedinologies that will help shape life in the space station, 
Artificial Intelligence (AI) seems certain to play a major role. The 
striking cantplexity of the station, its life si:5)port syst-ems, and the 
manufacturing ard scientific apparatus that it will hous^>. require that 
a good shctre of its siqpervision, maintenance, and control be done by 
compiter. At the same time, the need for intelligent corarnunication and 
shared responsibility between such cortpiter programs and space station 
residents poses a serious challenge to present interfaces between man 
and machine. Hence, the potential and need for contributions from AI 
to the space station effort is great. 

Ihe purpose of this paper is to suggest areas in \jhxch si^5)port for 
new AI research mi^t be e>^)ected to produce a significant impact on 
future space station technology. Given the breadth of this task, the 
apE)roach here will be to saitple a few such areas and to rely on the 
other symposium participants and other soi-^rces (e.g.. Technical Report 
NASA-ASEE, 1983; ^technical R^rt NASA , 1985) to fill in the picture. 
Mbre specifically, we will address here (1) the use of knowledge-based 
systems for monitoring aiva controlling the space station, and (2) 
issues related to charing and transferring responsibility between 
coonoputers and sp^ce station residents. 

Before focuss g on the specifics of these two problem areas, it is 
laseful to undersc ^ their significance to the development of the space 
station (and to oti*-, '^'tvanced projects such as development of a lunar 
base and interplanetary ^ bes) . 

In his keynote address ^ ■'s symposiimi, Allen Newell provides an 
analysis of the general char^ Istics and constraints that define the 
space station effort. Those of particular relevance to this paper 
include the following: 

9 Ihe station is an extraordinarily complex system with an 

extremely hi^ premiimi to be placed on reliability, redundancy, 
and failsafe operation. In past space efforts, a large share of 
astronaut training has gone into acquiring the knowledge needed 
to si:5)ervise, control, axxi troubleshoot varioiis spacecraft 
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subsystems. The increased ccatplexity of the space station 
argues for cxaipater-based assistance in the sipervision of many 
station subsystems, and it is no surprise that the history of 
the space program is a history of increasing auta,ation and 
coapiter si?>ervision. Furthermore, the hi^ pr^um on failsafe 
cperation places strong dertands on the flexibility and 
adaptability of such coitpiter-based si^jervisors. Such systems 
must be flexible enou^ to recognize and adapt to unanticipated 
events, aiid to coraraunicatG such unanticipated events clearly to 
the humans vdio help choose the response to these events. The 
flexibility demanded here goes well beyond that associated with 
present-day coirputiei: based si^jervisory system-i. 

The space station is intended to be a hi^y evolutionary 
system, vMch will be continually reconfigured and i^jgraded over 
the course of its lifetime in space. Ihe hi^y evolutionary 
nature of the station will make the task of crew training even 
more difficult than if the station were a static system. Ihe 
problem of v^jdating operating and troubleshooting procedures 
will be greatly exacerisated. In general, there will be greater 
demands on maintaining and i?)dating the external documentation 
of the space station subsystems, anJ on pronpt, thorxsurfi 
luting of procedures for monitoring, controlling, and 
troubleshooting the evolving space station. Cortputer-based 
methods for automatically updating such procedures, given 
t^tes to the description of the space station, would greatly 
enhance the ability to manage the evolving station. 

Ttie crew of the space station will possess differing levels of 
e>?»ertise regarding different space station subsystems, and will 
live in the station long enou^ that their e}$)ertise will chanqe 
over the course of their stay aboard the station, ihese 
differences in level of sophistication among various crew 
members (and between the same crew member at differing times) 
pose significant prd^lems and opportunities for the computer 
systems with vdiich they will interact. For naive users, 
ccsnputer systems that recommend given actions will have to 
provide a fairly detailed es^lanation of the reasoning behind 
tile recommendation. For more ejqjert users, less es^lanation may 
be needed. For advanced users, there will be an opportunity for 
tiie conpiter system to acquire new problem-solving tactics from 
the users. Furthermore, as a particular user becomes familiar 
with the conpeteiice and limitations of a particular 
cc3tpirt:er-based si^jervisor, his willingness to allow the system 
to make various decisions without human approva]. may well 
change. The ability to interface effectively with a range of 
users, acting as a kind of tutor for some and acquiring new 
ejqjertise from others, ^vould allow the computer to act as the 
"corporate memory" for the particular aspect of the space 
station that is its domain and for vMch it will house a 
continually evolving set of ej$)ertise. 
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MaiTixsRiiKS, DiAtarosnra, and ocjntrdlling ihe space station 

Given the above characteristics of the space station effort, it is 
clear that the use of c mpiter-based assistants for supervising various 
space station subsystems could have a major irtpact on the overall 
reliability and cost of space station operations* In order to develop 
such ccKpitei>-based si:?)ervisors, basic research is needed in a nuitiber 
of areas such as r^resenting and reasoning about carplex designed 
artifacts, inferring the behavior of such systems from schematics 
showing their structure, an5 autanatic refinement of supervisory 
procedures based on empirical observation as well as the known system 
schematics. 

Since the space station will itself be a large, well-documented 
artifact, it is reasonable to expect a significant number of ^ 
cpportunities for flying oatrputers to the task of si:5)ervising, 
controlling and diagnosing the space station. For example, one itii^t 
well expect that a cocputer could itcnitor various space station 
subsystems such as the parts of the navigation system, to detect 
behavior outside their expected operating ranges, take remedial actions 
to contain the effects of observed errors, diagnose the likely causes 
of the observed synptcans, and reconfigure the system to eliminate the 
error* Of course, limited applications of ocatputers to this Icind of 
problem are fairly common in current-day space systems. But p^resent 
loethods for automated monitoring, diagnosis and control are far from 
the levels of generality, robustness, maintainability, and conpetence 
that one vrould desiire* AI offers a new approadi to the problem of 
autciTated sipervision* With appropriate research support, NASA mi^t 
expect to significantly accelerate the development of AI itethods for 
dealing with this class of problems, and thereby provide inportant new 
technology to support the space station. 

A number of recent AI systems have addressed problems of monitoring, 
diagnosing, or controlling designed artifacts such as cortputer systems 
(Ennis et al*, 1986), electro-mechanical systems (Pazzani, 1986), 
chemical processes (Scarl et al*, 1985), and digital circuits (Davis, 
1984; Genesereth, 1981) . From this work, an initial set of techniques 
has eiaerged for building conputer programs that embody a model (often 
in qualitative terms) of the behavior of the system under stucfy, and 
\jhich use this model to reason about the diagnosis, control, or 
reconfiguration of the system. While much remains to be understood, 
the initial approadies have shown clearly the potential for supervisory 
conputer systems that combine judgemental heuristics with reasoning 
from a concrete model of the systems under study. 



An Example 

As an exanple of an AI system that deals with monitoring and 
troubleshooting a designed ^ifact, consider Davis* circuit 
troubleshooting system (Davis, 1984). This system troubleshoots 
digital circuits, given a schematic of the misbehaving circuit together 
with detected discrepancies between predicted aixi observed signal 
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values. Its organization is typical of several troubleshooting systems 
tnat have been developed for electronic, mechanical, and other tvces of 
systems. ■'^^ 

Tha basic idea behind this troubleshooting system is that it uses 
the scheanatic of the system, together with its knowledge of the 
expected behaviors of system coirponents, in order to reason backward 
from cdoserved incorrect output signals to those upstream circuit 
components that could have produced the observed error. This process 
IS illustrated in Figure 1, taken from Davis (1984) . 

In this figure, if thfe circuit inputs are given as shown, the system 
will infer the expected outputs as shown in round parentheses, based on 
Its knowledge of the behaviors of multioliers and adderr.. if the two 
observed ca^ts are as shown in square' parentheses, then a discrepancy 
IS found between the ejqjected and observed values for signal F. The 
system will then enumerate candidate fault hypotheses by considering 
that the error may be due to a failure in Add-i, or to incorcect values 
for one of its inputs (either X or Y) . Each of these last two 
hypotheses mi^t be explained further in terms of possible failures of 
the corrponents or signals on vMch it, in turn, depends, ihus, 
candidate fault hypotheses are enumerated by examining the structure of 
the circuit as well as the known behaviors of its components. 

In addition to enumerating fault hypotheses in this fashion, the 
system can also prune these hypotheses by determining other anticipated 
consequences of presumed faults. For exairple, the hypcthesis that tiie 
error in signal F is caused by an error in signal Y, carries with it 
certain iinplications about the value of signal G. Hie value of 10 for 
signal F can be ejqjlained by a value of 4 for signal Y, but this would 
i.^ ^ ^ expected value of 10 for signal G (^ch is observed 
to hold the value 12) . Hence, this hypothesis may be pruned, as long 
as one assumes that the circuit contains only a single fault. 

Ihe above exairple illustrates how a coitputer system can reason about 
possible causes of observed faults, by using knowledge of the schematic 
of Jie faulty system as well as a library describing the expected 
behaviors of its corrponents. ihere are many subtleties that have been 
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FIGURE 1 Troubleshooting exairple. Source: Davis (1984) . 
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glossed over in this exairple, such as reasoning about the possibility 
of multiple system faults, interactions between faxilts, intermittent 
errors, utilizing statistical knowledge of liJcely faxilts and the 
resulting faulty behavior, scaling this approach to more coitplex 
systems, and the like. Basic research is still needed to develop more 
realistic diagnostic systems of this sort, and many of these issues are 
lander stud/ at this time. In addition, a good deal of research has 
been devoted to developing similar troubleshooting systems for 
artifacts other than digital circuits (e.g., mechanical 
electrcooftechanical, and chemical processes) . Ihe topic of reasoning 
about the ejqpected behavior of designed artifacts of many types is an 
active research area within AI (see, for example, the recent special 
volimie of Artificial Intelligence on qualitative reasoning about 
physical systems (North-Holland, 1984).) 



'^Hands-Qn" Supervisory Systems 

The above exanple is meant to suggest how a program can utilize an 
internal model of the system it is monitoring in order to localize the 
cause of anomalous behavior. Since the space station will be heavily 
instnimented with sensors and with conpater-controlled effectors, the 
real opportunily here lies in developing a technology for "hands-on" AI 
si^jervirDry systems: systems that have the means to directly observe 
and cont3rol the behavior of systems that they monitor, and that possess 
an e)q)licit model of the system xander supervision to guide their 
reasoning about monitoring, controlling, and troiibleshooting this 
system. Figure 2 illustrates the general organization of such a 
hands-on sipervisory system.-'' 

One instantiation of the scenario characterized in the figure could 
be an electronically self-sensing, self-monitoring space station. Here 
the system xander si5)ervision is the space station, sensors may observe 
the tertperatures, pressures, and electrical behavior of various 
subsystems of the space station, and effectors may correspond to 
electrically controlled devices such as signal generators, heaters, 
conpressors, and alarm systems. The goal of such an intelligent, 
self-monitoring space station would be to observe its behavior through 
its sensors, conparing these observations to the behavior anticipated 
by its internal model, and utilizing its effectors to maintain stable 
operation, reconfigure subsystems, and control the trajectory of states 
of the system. A number of observations are apparent about such a 
system: To a limited degree it is alreacfy possible to build such 
partially self-monitoring systems. The theoretical possibilities for 
coirpiter monitoring and control in such systems far exceed the 
capabilities of our present techniques. The effectiveness of such a 
system will depend on continuing fundamental research in AI, especially 
in areas such as qualitative reasoning, diagnosis, control, and 
leamii^. Tto allow for such a future, the initial design of the space 
station must allow for flexible introduction of new sensors and 
effectors in all subsystems of the space station, and over the entire 
life of the station. 
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FIGURE 2 Hards on supervisory system. 



A very different instantiation of the scenario of Figure 2 is 
obtained lay introducing mobility in the sensors and effectors of the 
ooitputer monitor. In this case, the si:5»r7isor could take the form of 
a collection of mcbile platforms v^ose sensors include cameras, range 
finders, touch sensors, and oscilloscope probes, and whose effectors 
include viieels, rocket engines, manipulators, signal generators, and 
arc welders. Such a system mi^t be e^qjected to monitor the physical 
plant of the space station, checJdng for wear, and repairing the 
station as necessary, both interior and e'-cterior. Several dbservations 
follow from considering this scenario: The leverage gained by adding 
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inobility to sensors ard effectors is lca:ge--esFecially in situations 
such as troubleshooting where the system parameters in question itii^t 
not be directly observable or controllable by statically positioned 
sensors and effectors. A number of difficult issues arise in^ 
representing and reasoning about three dimensional space, navigation, 
and the inechanics of physical systems. Given previous ejq^erience with 
robotics, it is clear that the difficulty of the technical problems can 
be considerably eased by designing a well^-engineered work environment 
(e.g., by including easy grasping points on objects that are to be 
manipulated) in the space station. 

In fact, we would like our supervisor to possess a combination of 
mobile and stationary sensors and effectors, including the union of 
those"in the above scenarios, Thus, these two scenarios illustrate 
different aspects of the class of hanc3s-on si:?5ervisor problems 
summarized in Figure 2, The two scenarios suggest a number of caramon 
technical problems, including problems of integrating human judgement 
with corrpiter judgement., planning a sequence of control operations 
based on only an incoopfplete model of the system under supervision, and 
utilizing sensory iiqput to refine the model of the system under 
supervision. At the same time, each scenario carries its own technical 
problems vftiich overlay those generic issues. For example, a mobile 
supervisor for monitoring and repairing the exterior surface of the 
space station must face issues such as representing and reasoning about 
three dimer.isional space and navigation, interpreting a rich set of 
perceptual data taken from a changing (and incompletely known) vantage 
point, and using tools to manipulate the space station, Thus, NASA 
should consider si:pporting research on the generic problems of hands-on 
supervisory systems, as well as research on selected instances of the 
problem vMch it expects would yield significant practical gains. 



Nature of the Problem 

A fundamental defining characteristic of the system si:pervisor problem 
is uncertaincy in the supervisor's knowledge of the system under 
study, A si:pervisor can almost never have complete and certain 
knowledge of the exact state of the system, of the rules that determine 
how one system state will give rise to the next, or of the exact ^ 
effects of its control actions on the system. This characteristic 
alters dramatically the nataire of diagnostic and control tasks. For 
exaitple, given a perfect model of the system under study, a program 
mi^t derive an open-loop control sequence to place the system in some 
desired state. However, in the absence of a perfect model, controlling 
the system requires interleaving effector actions with sensory 
observations to detect features of the system state. 

The -l^pes and degrees of uncertainties faced in system supervision 
problems vary, of course, with the specific task. For instance, the 
task of monitoring a digital circuit mi^t correspond to an extreme 
point in the spectjcum of possibilities, since circuits schematics do, 
in fact, provide a very detailed model of the system, axxi since 
observing digital signal values is (by design) a relatively unambiguous 
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task. It is probably no accident that several of the earliest attenpts 
to construct AI troubleshooting aicJs were conducted in the domain of 
digital circuitry. However, thst work showed that even in this domain 
It was very difficult to troubleshoot circuits based only on the 
knowledge available from the circuit schematic (Davis, 1984) . Ihe 
prdblera is that circuit behavior can depend on thermal effects, 
physical proximity of conponents, and other factors v4iich are not 
typically reflected in a circuit schematic. Furthermore, it is 
precisely in troubleshooting situations that such effects became 
significant to determining the system's behavior. Ihe problem of 
incomplete knowledge in modeling subsystem behaviors is even more 
difficult v*ien one considers systems with combinations of electrical 
mechanical, chemical, and biological subsystems. 

In addition to uncertainty in modeling the ej^sected behavior of the 
system under stu<fy, the difficulty of interpreting sensory input adds 
another kind of uncertainty in many domains. In the digital circuit 
world, it is fairly strai^tforwani to observe the value of a desired 
signal, thou^ it is rare that circuits are constructed so that every 
signal is brou^t outside the circuit for troubleshooting purposes, if 
the system under study is a chemical process rather than electrical, 
detecting relative concentrations of chemicals can often be a more 
complex task. In mechanical systems, detecting exact locations and 
forces is generally out of the question. If the system is the exterior 
of the space station and the sensors are video cameras, then the 
difficulty of sensing the exact location and physical condition of each 
subcomponent can itself became such an overviielming task that the 
observations themselves must be treated as uncertain. 

Yet another dimension of uncertainty arises from the effectors tl>at 
are utilized by the sipervisor to alter the system under study. Again, 
m the circuit domain effectors such as signal generators are 
relatively reliable. But in the robotics domain, in vMch the system 
being si^jervised is the physical world, effectors such as artificial 
limbs may be fairly unreliable in execnating actions such as grasping. 
In such cases, the problem of planning a sequence of actions to bring 
tiie systera to a desired state must take into account nondeterminism in 
the effect of actions it performs. 

In a sense, the ability to observe and affect the system under study 
and the ability to predict its behavior provide redundant sources of 
knowledge so that one can be used to make vp for uncertainty in the 
other. For instance, feedback control methods utilize sensory 
information to make vp for an inoatplete model of the next-state 
function. On the other hand, one can make due with observing only a 
small proportion of the signal values in a circuit and use the model of 
subcomponent behaviors to infer additional signal values \;qpstream and 
downstream of observed signals. 

Given the various uncertainties that must be faced by a si^jervisory 
system, it is unlikely that purely algorithmic methods can be mapped 
out for dealing with all eventualities (althou^ the vast NASA 
troubleshooting manuals indicate the degree to which this might be 
possible) . A sipervisory system will do best if it possesses 
redundancy to make \jp for the uncertainties that it must face: 
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redundancy in the sensors that give it infon.^tion about the world, in 
the effectors with vftuch it controls the world, and in the behavioral 
ncdels that it uses for reasonix^ about the system under stxjidy. While 
such redundancy can help reduce uncertainty, it will not be eliitiinated, 
and the supervisor must therefore eirploy problem solving methods 
designed to operate under incarplets information. All of these needs 
suggest the iitportance of combining heuristic methods with deductive 
nvsthods for reasoning about the system under study. Finally, these same 
problem characteristics that suggest the utility of enpploying AI 
methods (the need for flexibility in solving problems despite^ 
uncertainly) also suggest the importance of including humans in the 
prcblem-solving process. Even by optijnistic estimates, it seems 
unlikely that AI systems will be able to coirpletely replace hman 
judgement in maiiy si^^ervisory tasks, though they may well augment it in 
many tasks. Ihus, in many cases we envision cooperative problem 
solving involving conputer systems and humans. Section "Sharing and 
Transferring E5?)ertise in Man-Machine Problem Solving" discusses issues 
related to man-machine cooperation in this regard. 



Research Recommendations 

What research should be sv^^ported by NASA in order to maximize the 
future availability of hands-on si^^ervisory systems of the kind^ 
described above? This section lists some areas that seem especially 
inportant, thou<^ the list is ce3±ainly not intended to be conplete. 

• Ifodeling system behavior at multiple levels of abstraction. At 
the heart of the ability to si:pervise a system lies the ability 
to model its behavior. Systems theory prcr/ides one body of 
(primarily quantitative) techniques for describing and reasoning 
about systems. AI has developed more symbolic methods fcpr 
describing and reasoning about syst:ems, given a description of 
their parts structure. A good deal of research is needed to 
further develop appropriate behavior representations for a 
variety of sys1:ems at a variely of levels of abstraction, and 
for inferring behavioral descriptions from st:ructur^ ^ 
descriptions. In addition, work is needed on automatically 
selecting from among a set of alternative models the one most 
appropriate for the task at hand. For exanple, one useful^ 
research task might be to develop a program vAiich can be given a 
detailed schematic of a large ^stem (e.g., a coirputer) as well 
as a particular diagnostic prc±)lem (e.g., the printer is 
producing no out^t) , and which retnoms an abstract description 
of the system vAiidi is appropriate for troubleshooting this 
problem (e.g., an absturacted block diagram of the coirputer 
focussing on details relevant to this diagnostic task) . 

• Planning with inconplete knowledge. The planning problem is the 
problem of det:ermining a sequence of effector actions v*iich will 
take the external system to a desired state. This problem has 
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been studied intensely within AI, especially as it relates to 
planning robot actions in the physical world* Howe/er, current 
planning methocJs make unrealistic assunptions about the 
ocxtpleteness of the robot's knowledge of itj world, and of its 
knowledge of the effects of its own actions. New research is 
needed to develop planning itvethods that are robust with respect 
to xancertainties of the kirds discussed above. One iiseful 
research task here would be to develop methods that produce 
plans vixich inclvide sensor operations to reduce anticipated 
iincertainties in the results of effector actions, and that 
incritJde conditional branches in the plan to allow for "non-time" 
decisions based on sensory actions. 

Intec,rating ^:^^tho5s frora control theory with symbolic control 
methods* Problems of system control, diagnosis 
(identification) , and iionitorlng have been studied for sonvs time 
in fields such as system control theory. Such studies typically 
assume a quantitative, mathematical model of the system under 
si5)ervisior., \^iereas AI methods model the system in a symbolic, 
logical formalism. System theory has developed various methods 
for iising sensory feedback to make xjp for uncertainty in the 
model of the system under sipervision, but these methods are 
difficult to apply to conplex planning problems such as 
determining a sequence of robot operations to repair a failed 
door latch* Still, both fields are addressing the same abstract 
problems* Very little attention has been paid to integrating 
these two bodies of work, and research on both vertical and 
horizontal integration of these techniques should be si:5)ported. 

Automatically refining the si^jervisor's theory of system 
behavior throu^ € perience. As discussed in the previous 
subsection, a major limitation on the effective^less of a 
si^jervisor lies in its uncertain kncv/ledge of the systen; under 
supervision* therefore, methods for automaticaliy refining the 
saperv5jsor*s knowledge of the system woal^d be extremely xoseful. 
In AI, research on machine learnirg and auto ited theory 
formation should be si?]ported as it applies to this problem. 
The integration of this work with work in systems theory on 
model identification should also be e^^lored. Possible research 
tasks in this area include developing robot systems that build 
vjp maps of their physical environment, and systems that begin 
with a general coirpetence in scatve area (e.g., general-purpose 
methods for graspir^ tools) and vMch acquire with experience 
more special purpose coirpetence with experience (e.g., special 
methods for most effectively manipulating individual tools) . 

Perception from multiple sensors. One method for reducing 
uncertainty in the sipervisor's knowledge of the system's state 
is to allow it to use multiple, redundant sensors. Ihus, a 
robot mi^t use several video cameras with overlapping fields of 
view, placed at different vantage points, together with touch 
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sensors, range finders, infrared sensors, etc. Or a supervisor 
for itonitoring a power simply system mi^t utilize a set of 
overlapping voltage and curfent sensors together with chemical 
sensors, heat sensors, etc. The benefits of i:ising multiple^ 
sensors is clear — ^they pixfvide more information. However, in 
order to make use of the increasing amounts of data available 
frcm miltiple sensors, research is needed to develop more 
effective sensory interpretatioiVperception methods for 
individual sensors, and for fusing data from several sensors. 
An exaitple research task here mi^t be to develop a system that 
eirploys a number of video cameras, and \Mch determines the 
correspondence between image features of the various images. A 
more ambitious project .tni^t try to predict image features 
likely to be found by one camera, based on information from 
other touch, video, and heat sensors. 

Representing and reasoning about 3D geometric properties. For 
supervisors that possess mc±>ile sensors or effectors, a variety 
of problems exist in reasoning about navigating throu^ space, 
and in reasoning about 3D mechanical linkages sucii as those that 
coi:?>le a robot arm to a screw via a screw driver. Research is 
needed on r^resenting 3D objects (including eirpty space) in 
ways that allow for efficient corrpitation of relations among 
objects, such as intersections (collisions), imions, possible 
packings, etc. Furthermore, since manipulating the world 
involves constructing teitporary mechanical linkages among 
c±>jects (e.g., among a robot arm, screw driver, screw, and 
wall) , research is needed on efficiently representing and 
reasoning about such linkages so that effector commands can be 
planned that will achieve desir^^d effects. While 
special-purpose robots operating in special-purpose environments 
can sometimes avoid using general methods for reasunir>j about 3D 
geometry, general purpose systems eyjpected to solve 
unanticipated problems will require this capability. 

Designing systems to minimize difficulty in observing and 
controlling them. Given the great difficulties in the 
su^^ervisory task that are introduced by uncertainty, one obvious 
reaction is to try to design the space station to reduce the 
uncertainties that automated sipervisors will face. In short, 
the station should be designed to maximize the observability and 
controllability of those featuires \Mch the si:qpervisor will need 
to sense and effect. In the case of a si:5)ervisor with immobile 
sensors and effectors, such as a system to monitor the power 
simply, this requires that a broad and redundant set of sensors 
and control points be built into the power supply at design 
time. In the case of mobile si:5)ervisors, the observability of 
the station can be engineered, for exairple, by painting 
identifying marks on objects vMch will ease problems of object 
identification and of registering images obtained from multiple 
viewpoints. Similarly, the controllability of the physical 
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space station can be enhanced, for exairple, by designing all its 
parts to present the same siirple grasping point. While a good 
deal of anecdotal ej^jerience has been obtained on designing 
robot workstations to maximize their controllability and 
observability, little exists in the way of a science for 
designing such easily-sipervised systems. Research in this 
area, if successful, could significantly reduce the nxiniber of 
technical problems that automated si^jervisors in the space 
station will face. 

® Feasibility of replacing hardware subsystems by software 

emulations. For iitimobile sij^^ervisors vdiich monitor subsj^tems 
such as power supplies, navigation systems, etc., one intriguing 
possibility is that they mi^t be able to substitute additional 
conpitation in place of failed hardware. For exanple, consider 
a subsystem, S, with a failed thermostat, Tl. If S is being 
si^jervised by a corrpxter system with a good model of the 
subccmponents of S, then this si:qpervisor mi^t be able to keep S 
working acceptably by substituting its own simulated output of 
Tl for the output of the failed thermostat. Ihe degree to \^ch 
this is possible will depend, of course, on (1) the veracity of 
the supervisor's model of S, (2) the access the supervisor has 
to other sensors in S (the more redundant, the better), and (3) 
the ability of the supervisor to control the point in S 
corresponding to the output of Tl. V3hile a software simulation 
mi^t be slower and less accuratie than a working thermostat, the 
advantage of substituting software for failed hardware is 
clear. Perhaps a small number of hi^-speed processors (such as 
parallel processors that have been developed for circuit 
simulations) cculd be included in the space station precisely 
for providing hi^-speed backip for a wide range of possible 
hardware failures. While the feasibility of adding robustness 
to the space station by adding such conputational power is 
urproven, the pot:ential impact warrants research in this 
direction. 



SHARING AND TEIANSFERRING EXPERTISE IN MAN-MACHINE PROBLEM SOLVING 

As not::ed in the previous section, the same problem characteristics that 
argue for flexibility and adaptability in coirputzer si:pervisory systems 
also argue for allowing humans to participate in problem solving and 
decision making processes. As the coirplexity of canpater si:5)port for 
the space station grows, the need for communication and shared 
responsibility betrween the computer and space station residents will 
grow as well. If ever we reach the stage of a fully automated, 
self-si5)porting space station, we are likely to first spend a 
significant period of tin^ in vMch computzer assistants will provide 
certain fully"autamat:ed services (e.g., sijtply monitoring stzation 
subsystems to watch for une>^)ected behavior) , but will require 
interaction with their human counterparts in responding to many novel 



ERLC 



110 



103 



events. Effective methods for such mail-machine interaction will 
encourage the introduction of cortpiter assistants for many more tasks 
than possible if totally autamatai operation were demanded. Ihis 
section considers scopae of the research issues related to developing 
effective comraunication between AI systems and their users. Since 
several other synposim participants will address the issue of 
man-machine cosnraunication in general, I will try to focus this section 
on issues specific to sharing problem solving responsibilities and to 
transferring e5?)ertise from humans to their ccfirputer assistants. 

Shared responsibility is a desirable characteristic \dienever one is 
faced with a multif aceted task for vMch humans are best suited to some 
facets and machines to others. Humans use mechanical tools (e.g., 
wrenches) and ccnpitational tools (e.g., pocket calculatois) for 
exactly such reasons. In the space station, we may find it desirable 
to share re^xmsibility in motor tasks, as in a human controlling the 
itechanical robot arm in the space shuttle, in cognitive tasks, as in a 
human and cxaiputer system working jointly to troubleshoot a failed 
power si^jply, or in perceptual tasks, in vMch a human may assist the 
coitpiter in finding corresponding points in multiple ca^^era images so 
that the coanoputer can then apply image analysis and enhancement 
procedures to the images. In each case, shared responsibility makes 
sense because the machine has certain advantages for some aspects of 
the task (e.g. , physical strength and the ability to operate in adverse 
environments) while the human possesses advantages for other aspects 
(e.g. , motor skills and flexibility in dealing with the unanticipated) . 

Sharing in the process of problem solving also raises the prospects 
for transfer of esqpertise. In many fields, humans learn a great deal 
by acting as an apprentice to help a more advanced e55)ert solve 
problems. As the medical intern assists in various hospital 
procedures, he acquires the e>5)ertise that eventually allows him to 
solve the same problems as the doctor to v*iam he has apprenticed. One 
recent development in AI is a grcwing interest in constructing 
interactive problem solving systems that assist in solving problems, 
and that attenpt to acquire new esqpertise by cA>serving and analyzing 
the steps contributed by their \asers. This section argues that 
research toward such learning apprentice systems is an important area 
for NASA sipport. 



An Exanple 

In order to ground the discussion of shared responsibility and learning 
apprentices, we briefly summarize a particular knowledge-based 
consultant system designed to interact with its users to solve ptcblems 
in the design of digital circuits. This system, called LEAP (Mitchell 
et al. , 1985) , is a prototype system v*iich illustrates a number of 
difficulties and opportunities associated with shared responsibility 
for problem solving. 

LEAP helps to design digital circuits. Users begin a session by 
entering the definition of some input/ou1^t function that they would 
lite a circuit to perform (e.g., multiply two numbers) . LEAP provides 
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assistance in designing the desired circuit, by utilizing a set of 
if-then rules vfliich relate desired functional characteristics to 
classes of circuit inpleroentations. For instance, one rule in this set 
dictates that "IF the desired function requires converting an irpit 
serial signal to an equivalent parallel signal, THEN one may use a 
shift register." LEAP utilizes these rules-^ to suggest plausible 
refinenents to the abstract circuit modules that characterize the 
partial design at any given stage. 

Figure 3 depicts the interface to lEAP as seen by the user. The 
large window on the ri^t contains the circuit abstraction which is 
presently being designed by the user/system. As shown in the figure, 
the circuit consists at this point of two abstract circuit modules. 
For each of these circuit modules, lEAP possesses a description of the 
fui^tion to be iirpleraented. At any point during the design, the xoser 
selects one of the uniirplemented circuit modules to be considered, and 
lEAP examines its rule set to determine vAiether any rules apply to this 
module (i.e., rules v,4iose preconditions match to the specifications of 
the circuit module) . If LE3^ determines that some of its rules apply 
to this situation, it presents the recomraendations associated with 
these rules to the i:iser. Ihe user can then examine these options, 
select one if ha wishes, and LEAP will refine the design accordingly. 
Figure 4 depicts the result of such an iirplementation step. Should the 
user decide that he does not want to follow the system's advice, but 
instead wishes to design this portion of the circuit manually, he can 
lando the rule-generated refinement and use lEAP as a sircple, 
graphics-oriented, circuit editor. 

IZAP provides a siirple exairple of shared problem solving between man 
and machine. Ihe user directs the focus of attention by selecting 
vMdti circuit module to refine next. lEAP suggests possible 
itrplementations of this module, and the user either approves the 
recommendations or replaces them with his own. lEAP thxis acts as an 
apprentice for design. For design prcfclems to vMdh its rule base is 
well-suited, it provides losefuD. advice- For circuits conpletely 
outside the scope of its knowledge it ireduces to a standard circuit 
editing package, leaving the bulk of the work to the human user. As 
the knowledge base of LEAP grows over time, one would expect it to 
gradually take on an increasing share of the respansibiliiy for solving 
design prc±>lems. 

lEAP also illustrates how such knowledge-based apprentices mi^t 
learn from their users (Mitchell et al., 1985). In particular, LEAP 
has a primitive capabiliiy to infer new rules of design by observing 
and generalizing on the design steps contributed by its xasers. In 
those cases where the user rejects the system's advice and designs the 
circuit submodule hiitiself , lEAP collects a training example of some new 
rule. Ihat is, LEAP records the circuit function that was desired, 
along with the user-si?jplied circuit for ij:rplementing that function. 
lEAP can then analyze this circuit, verify that it corcectly irtplements 
the desired function, and formulate a generalized rule that will allow 
it to recommend this circuit in similar subsequent situations. The key 
to lEAP's ability to learn general rules from specific exaitples lies in 
its starting knowledge of circuit operation. Althou^ it may not 
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initially have the expertise to generate a particular iitplementation of 
the desired function, it does have the ability to recognize, or verify, 
the correctness of many of its users • solutions. In general, it is 
easier to recognize a solution than to generate one. But once a 
solution can be recognized and ej^lained, then lEAP can generalize on 
it Icf^ distinguishing that certain features of the exairple are critical 
(those inentioned in tine verification) , vdiereas others are not (those 
not mentionoi in the verification) • 

lEAP is still a research prototype system, and has not yet been 
subjected to testing on a large xiser community. While there are no 
doubt inary technical issues still to be solved, it serves as a 
suggestive exanple of how a knowledge-based consultant mi^t be useful 
as an apprentice even before its knowledge base has been fully 
developed. It also suggests how its interaction with the vsbt might 
lead it to extend its knowledge base automatically. The methods for 
collecting training exanples and for formulating general rules appear 
generic enou^ that similar learning apprentice systems mi^t be 
dev€iloped for many supervisory tasks of the kind discussed in the 
previous section. Other current research is exploring the feasibility 
of such learning apprentices in task domains such as signal 
interpretation (Smith et al. 1985), proving mathematical theorems 
(O^Rorke, 1984) , a3id planning simple robot assembly steps (Segre and 
DeJong, 1985). 



Nature of the Problem 

The lEAP system suggests one kind of shared responsibility between 
computer and himan, as well as a mechanism for the gradual accretion of 
knowledge by the system so that over time it can take on a 
progressively greater share of responsibility for prctolem solving. The 
ability to acquire new rules by generalizing from the users' actions 
follows from iFAP's starting knowledge c ^ how circuits work. That is, 
it begins with enou^ kna^ledge of how circuits operate, that it is 
able to ej^lain, or verify, the appropriateness of the users' actions 
once it observes them. Once it has verified that the user's circuit 
correctly iirplements the desired function, then it can generalize on 
this action by retaining only those features of the specific situation 
that are mentioned in this explanation. Similarly, if one tried to 
construct such a learning apprentice for troubleshooting power supply 
faults, one woxold want to include sufficient initial knowledge about 
the power si?)ply (i.e., its schematic) that the system cotold verify 
(and thus generalize on) users' hypotheses about the causes of specific 
power supply malfunctions. 

Thi:is, in order for a system to learn from observing its users, it 
must begin with sufficient knowledge that it can justify idiat it 
observes the user do. It seems that for supervisory tasks of the kind 
discussed above, the primary knowledge required^ to construct such 
explanations is a description of the structure and operation of the 
system under supervision. Since AI has developed methods for 
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irepresenting such knowledge, supervisory tasks seem like good targets 
for further research on learning apprentices. 

In addition to cognitive tasks such as inonitoring, designing, and 
debugging, one mi^t consider learning apprentices for robotics tasks 
such as xising tools (see Segre and DeJong, 1985 for one exairple) . 
Given a new tool for the robot to use, one way to train it itd^t be to 
use a teleoperator to guide the robot throu^ several uses of the 
tool. For exairple, given a new type of fastener, a user itd^t guide 
the robot to grasp the fastener and use it to fasten two objects 
together. If the syptem could start with enou^ knowledge to explain 
vMch features of its trajectory and other motions were relevant to 
accarplishing the given task, then it mi^t be able to generalize 
accordingly. Research on such robotic learning apprentices seems 
\\rc>rthvMle and hi^ily relevant to the goals of the space station 
program. 

To understand the issues involved in sharing information and 
responsibility between huoman and machine, it is instructive to consider 
the issues involved in sharing responsibility strictly among humans. 
In both cases there are certain subproblems that are best dealt with by 
individual agents, and others \Aiere shared responsibility makes best 
sense. Successful interaction requires arriving at an agreement on 
vMch agent will perform vAiich task. In LEAP, the user makes all such 
choices. But in itvore conplex scenarios the user may not want to spend 
the time to approve every suggestion of the apprentice. In such cases, 
there must be ways to agree i:pon a policy to determine vdoich decisions 
are worth having the human approve. Of course there are many other 
issues that follow from this analogy as well: the cooperating agents 
evenlnially need accurate models of their relative conpetience at various 
subtasks. And there will be questions of social and legal 
responsibilities for actions 1:aken. 

Here we have tried to suggest that one class of canpit:er assistants 
on the space station be viewed as d/namic syst:en© that interact with 
their users and work toward extending their knowledge ax)d corpetence at 
the task they perform. Preliminary results from AI suggest that this 
is a worthvAiile research task. The nature of the space stzation 
suggest:s that such self-refining systems are exactly vfliat will be 
needed. The continually changing configuration of the station itself, 
the continually changing crews and types of operations that will be 
conducted aboard the space station, the evolving technology that will 
be present, all dictate that the conputer assistants aboard must be 
able to adjust to new problems, new procedures and new problem solving 
slurategies over the life of the space station. 



Research Recommendations 

Here we suggest several areas in which NASA mi^t sipport research 
tOfjaxd advanced int:erfaces for int:eraction between humans and 
intelligent consultant systzems. 
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ArcMtec±ures that su^jport graceftil transfer of e}5)ertise and 
respcxisibilitY. Research toward developing learning apprentice 
systems for space station applications is warranted based on 
recent AI results and on the iitportance of such systems to the 
space station program. A prudent research strategy at this 
point would be to si?port development of a variety of learning 
prentices in various task areas (e.g. , for troubleshooting 
space station subsystems, for monitoring and controlling 
svib^stems, for managing robot manipulation of its 
environment) • Such a research strategy vA:;uld lead to 
e3q)erimenting vdth alternative software architectures for 
learning apprentices, as well as an increased understanding of 
the feasibiliiiy of constructing learning apprentices for 
^)ecific space station task areas. 

Evolution of grainsize and initiative of interaction. As the 
expertise of the apprentice grows, and as the human becomes more 
familiar with the conpetence and oomraunication capabilities of 
the ccsfipiter, one expec±s that the optimal style of 
ccammication should shift. Changes may occur, for exairple, in 
^Aio takes the initiative in controlling the direction of problem 
solving, and in the grainsize of the tasks (e.g., initially 
small subtasks will be discussed, but later it may be sufficient 
tx> focus only on larger grain subtasks) . Research on interfaces 
that si^jport these kinds of changes over tme in the nature of 
the interaction, and vMch si^jport e>qplicit communication about 
such issues, should be encouraged. Such flexible interface-s are 
important whether the apprentice learns or not, since the user 
will certainly go through a learning period during vMch his 
understanding of the system's coirpetence and foibles, and his 
willingness to trust in the system will change. 

T&sk-oriented studies of cooperative problem solving. In order 
to understand the kinds of knowledge that must be communicated 
during shared problem solving, it may be worthvMle to conduct 
protocol studies in vMch a novice human apprentices with an 
ej^jert to assist him and to acquire his e^qpertise (e.g. , at a 
task such as troubleshooting a piece of equipment) . Data 
collected from such ejqjeriments should provide a more precise 
understanding of the types of knowledge cotimunicated. during 
shared problem solving, and of the knowledge acquisition process 
that the apprentice goes throu^. 

Transferring knowledge from machine to man. Given the plans for 
a frequently changing crew, together with the likely task 
specialization of coonoputar consultants, it is reasonable to 
assume that in some cases the conpiter consultant will possess 
more knowledge about a particular problem class than the human 
that it serves. In such cases, we would like the s^'stem to 
communicate its understanding of the problem to the interested 
but novice user. Certain work in AI has focused on using large 
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know^ledge bases as a basis for teaching expertise to hunans 
(e.g. , Clancey ard Letsimer, 1984) . Research advances on this 
and other methoc3s for coRminicating machine knowledge to humans 
would place NASA in a better position for crew training and for 
integrating intelligeit machines into the human space station 
environment. 



SCxMMAJlY 

TJds paper p>-esents a sairpling of reccmnanded research directions vMdi 
NASA may wisti to siqpport in order t. accelerate the development of AI 
technology of particular relevance to the space station. We feel that 
recent AI research indicates the potentieil for a broad range of 
applications of AI to space station prx±)lems. In order for this 
potential to became reality, significant" si^^port for basic AI research 
is needed. 

Research tcward developing a wide range of "hands-on" supervisory 
systems for monitoring, controlling, troubleshooting and maintaining 
space station subsystems is strongly recoramended. Such research is 
inportant both because of its potential inpact on reliability and 
safety of the space station and because the t:echnical develcptient of 
the field of AI is at a point \Aiere a push in this area may yield 
significant tzechiiical advances. Such hands-on supervisory syst:ems 
could include both physically stationary sipervisory systems that 
monitor electronic subsystems, power siqpplies, navigation subsystems 
and the like, as well as physically mobile si:pervisors that monitor and 
repair the exterior and intzerior physical plant of the space st:ation. 
Important technical challenges remain t:o be addressed in both areas. 

In sipport of developing ax^ deploying such knowledge-based 
si:pervisors, it is recommended that research be conducted leading 
tnward interactive, self-extending knowledge-based systems. Such 
systems may initially serve as useful apprentices in monitoring and 
prdDlem solving, but should have a capability to acquire additional 
knowledge throu^ ej^jerience. The evolutionary nat:ure of the space 
station txxjether with the turnover of crew assure t±at a continually 
changing set of prc±)lems will confront onboard coitput:er systzems. This 
feat:ure of the space stat:ion, tx^gether with the need to continually 
extend the knowledge of problem solvers onboard, argue for the 
inportance of research toward int:eractive, self-extending knowledge 
based systems. 

Ihere are certainly additional areas of AI research vMch would also 
benefit the space station program. The goal of this paper is to point 
out a few such areas, in the hope of stiimilating thou^t about these 
and other possible uses of AI in the space station. 
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NOTES 



1. In fact, initial AI systems for troubleshooting and control have 
generally been restricted to dealing with t^Tped-in observation 
inputs and to typing out their reconimendations rather than exerting 
direct control over the system. However, there are exceptions to 
this, such as the YES/MVS system (Ennis et al., 1986) vdiich dj»:ectly 
monitors and controls qperations of a large conputer system. 

2. The research recommendations listed here represent solely the 
qpinion of the author, and should not necessarily be interpreted as 
recommendations from the synposium as a vAiole. 

3. lEAP also utilizes knowledge about behaviors of individual circuit 
components, plus knowledge of how to symbolically simulate digital 
circuits. 

4. Other relevant knowledge includes the goals of the user (e.g., a 
decision ittust be made to act within 15 seconds) , and eirpirical data 
on the frequencies of various types of faults. 
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EXPERT SYSTEMS: APPKECATIQNS IN SPACE 



Bruce G. Buchanan 



INTRDDUCnCXT 

Artificial intelligence is one of the roost inportant trends in 
ccetputing because making ocatpiters behave intelligently is at least as 
inportant as manipulating data efficiently. Opportunities for losing 
intelligent prograro?^ in NASA space station environnvents are niimert>us 
and obvious. But roan^ of those opportunities require substantial 
research in artificial intelligence before they can be realized, Ihis 
paper looks at the technology of artificial intelligence, especially 
ejq^ert systems, to define "frcaa the inside out" \ih3t capabilities exist 
that are relevant for applications and environments in the space 
station, and vdiat research needs to be prcsnoted in order to achieve 
systems better able to interact syiribiotically with a variety of persons 
for long t±aes in space. 

Anderson and Chambers (1985) mention a number of characteristics of 
systems in a human-centered space station. Ihese include: 

9 symbiosis with humns: human and machine capabilities may 

complement one another 
® autonomous, 

• continuing cperation for a period 15) to 20 years, 

• qperatirg in an information-ric±i environment, 

9 consequences of interactions with humans not entirely 
predictable, 

• maturation of system iiiplies flexibility to accommodate 
operational growth and minor i:pgrades, 

e evolution of syst:em implies flexibility to accommodate new and 
enhanced functionality, 

• system may incliKie electronic crew members (ECMs) , 

• hvonans may have to learn new skills to interact productively 
witli conputiers, 

m ccaTput:ers may learn from htmans, 

• autonomous agentzs may serve a variety of roles with '/arying 
degrees of decision making power and authority. 

Itiese are scane of the relevant considerations in a txp-dcwn design 
of systems for the space station. Eac±i of these points implies a 
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researtdh and developnvent program of some intensity. Tliis paper takes a 
bottcn-ip view of the same considerations — i.e., starts with what 
exists today and asks hew we can achieve these design goals. By doing 
so, I hope to introduce some relevant details into the design of 
systems and the planning of research. 

E>5)ert systems are new being used in many decision-making situations 
of direct relevance to NASA's mission, spanning manufacturing, 
engineering, medicine, and science. At present, they are \ased more as 
"intelligent assistants" than as replacements for technicians or 
e35)erts. That is, they help people think throu^ difficult problems 
and may provide suggestions about vAiat to do, without taking over every 
aspect of the task. 

Coctjxiter programs that reason autonomously are also of extreme 
iirportance in space, but they, too, must be integrated into an 
environment that is centered around peqp-ue. Ihey are extensions of 
present technology along several dimeasions discussed here, that 
involve all of the same principles of design as the intelliga^. 
assistant programs. 

One primary consideration is why intelligent systems are necessary 
in space. Althou^ there are many reasons to build an e^o^ert system, 
they are all based on the premise: "E>q)ertise is a scarce" resource." 
Bie corollary (by MUrphy's Law) is: "Even v*ien there is enou^ 
e>5)ertise, it is never close enou^ to tliose who need it in a hurry." 
Because this is true— almost by definition of the term 
•expertise' — constructing expert systems that reason at the level of 
NASA's, or their contractors', specialists may have several benefits. 
These are summarized in Table 1. 



VJHAT IS AN EXPERT SYSTEM? 

The general nature of e55)ert systems is familiar to everyone within 
NASA. A reiteration of the four major characteristics is provided 
below to help define the nost iitportant dimensions for research and 
development efforts. 

An e}5)ert system is a coirputer program with expert-level problem 
solving abilities, which also fits some other criteria: it is a 



TABIE 1 Scnve Perceived Benefits of Expert Systems: Responses of 86 
Users of Khcwledge Engineering Tools 



1. Replicate e>5)ertise 

2. Preserve ejq^ertise 

3. Increase productivity and cost savings 

4. Free human e^qperts for more demanding problems 

5. Provide expert consultations to inexperience staff 



SOJRCE: Bauman (1984) 



122 



115 



syiribolic reasoning program that xases heuristics, its reasoning and 
knowledge base are understandable, and—most iitportantly— it is 
flexible. These characteristics are discussed below. All are 
iirportant for applications in the space station, and all define 
research topics that will enhance current capabilities. 



E>cairple 

One well-known e55)ert system that has became a classic, althou^ not 
actively used, is MYCIN. It was developed at Stanford by E. H. 
Shortliffe and others in the mid-1970s. Its task is tv7o-fold: (a) 
diagnose the cause (s) of infection in a patient and (b) recommend 
appropriate drug therapy. From a medical perspective, MiTCEN's 
knowledge base is now dated; froxTi the perspective of e3q)ert systems it 
represents much of the kind of reasoning that is captured in today's 
systems. MYCIN'S conclusions were demonstrated to be equal in quality 
to those of infectious disease specialists at Stanford Medical Center. 

The sample typescript shov;n in Appendix A illustrates MYCIN'S 
requesting information about a case and reasoning to conclusions about 
the best treatment. 



Performance 

Naturally we want oonpiter programs to solve problems without error. 
But that is not always possible — in fact, outside of mathematics and 
logic we don't have flawless methods we can put into programs. 
Specialists in engineering, science, education, the military — and every 
area outside of pure logic — ^must solve problems with less than perfect 
methods. How do they do it? Mostly by building up specialized 
knowledge throu^ extra years of training and ej^^erience and by 
reasoning carefully with that knowledge in situations they have learned 
to recognize. They are not infallible, thou^. Specialists' decisions 
are challei^ed frequently— most noticeably in the courts. So it is 
also unreasonable to expect conputer programs to reason infallibly in 
all of these areas. Occasionally new methods are discovered that 
provide much better results than the established methods of the old 
practitioners. But these iiiprovements can then be put into programs, 
thus raising the overall standard of performance viiile still keeping 
the same relative standard of coirparison with the best specialists. 



Reasoning 

When we say that e5q)ert systems are reasoning — and not just calculating 
with numbers~we are saying that they belong to a class of programs 
i;ising the irethods cf artificial intelligence (hereafter AI) . In the 
1940s, corrpit-ars were used almost exclusively for large mathematical 
problems. At Los Alamos, for instance, scientists had to solve conplex 
mathematical equations in order to calculate elements in the design of 
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the atcmc barrib. These applications are \asually referred to as 
large-scale scientific conpitation, or "nurriber crunching" for short. 
In the 1950s, lEM and other carputer manufacturers, realized the 
enonaous value in helping business solve pixiblems of record keeping, 
payroll and the like. These applications extended the concept of 
aar^?uter-as-calculator to canputer-as-data-manager. 

Ai both of these classes of applications, the method of conputation 
is error-free. Ihere is no question that the result is correct, 
providing of course that the ccoooputer has been programmed correctly. A 
mathematical equation is solved correctly; an ertplqyee roster is sorted 
correctly — if the methods are followed precisely. And coitputers are 
better able to follow cceotplex instructions than people are. In 
conpiter science, logic and mathematics we call these procedures 
algorithms. Biey are procedures that can be guaranteed to provide a 
correct answer in a finite time, if there is one, and otherwise will 
provide a statement that the problem is not solvable. 

Scsne algorithms are too expensive to use, however, even in 
ocarputers. A classic exaitpl^ is finding the shortest route a 
travelling salesman can take to visit many cities once and end up at 
hcaooe. With more than a handful of cities, algorithmic methods will not 
finish in time to be laseful. For this reason, alternative methods have 
been develc^jed. 

Arcamd the mid 1950s and early 1960s an alternative style of 
conpiting cams to be recognized as iirportant. Instead of always using 
algorithms, a ccaotpiter may use heioristics — rules of thumb that aid in 
finding plausible answers qr \ckly without guaranteeing the correctness 
of the results. Sometimes these rules of thurtib are introduced into 
large numerical simulations in order to get the simulations to crank 
out answers more quickly. Or approximate methods may be substituted 
for more precise ones for the same reason. The assuirptions may not all 
be correct; thus the results of the simulation may not be correct. 

^'Jhen heuristic (non-algorithmic) methods are combined with symbolic 
(non-numeric) data, we are dealing with that part of coatpiter science 
known as artificial intelligence. 



Understandability 

When someone truly knows sonaething, he or she can "give an account" of 
what he knows. In our terms, good performance is not enou^ to call a 
person (or program) an ejqpert— he/she (it) should also be able to 
e35)lain v*iy the solxition is plausible, \Aiat features of the situation 
were noted to be important, vdiat knowledge and prctolem solving methods 
v/ere xised. Otherwise we label a person as "consistently (but 
unaccountably) lucky", or maybe "psychic". Each field has its own 
standards of xdiat a reasonable e>q)lanation is. A surgeon v4io 
reoomraends aitpitation of a leg generally talks about the process of 
disease or extent of injiory and vdiat will happen if it is not 
airpitated. A broker v*io advised liquidation of one's stock portfolio 
may ejqplain the advice with respect to technical charts, historical 
trends, or some economic principles that point to a stock market 
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collapse. In their own ccanmunities, both the surgeon and the broker 
can usually justify— in court if necessary— the advice they give. And 
we regard them as experts partly because they have the knowledge that 
lets them do this. 



Flexibility 

Vie expect experts to be flexible in their thinking. And we regard 
persons as amateurs, not experts, when we encounter opinions that are 
rigid, locked-in ways of dealing vrith problems, or an inability to deal 
with new situations. 

In particular, tliere are two situations in vdiich we want ejqpert 
systems to be flexible: 

1. At advice-giving time we want the program (or a person) to 
provide good advice about situations that have never been 
encountered before. Novices with good memories may be able to 
provide the "textbook" ansivers for classic situations, ESq^erts 
however, should, in erudition, be able to reason about novel 
situations, 

2, At the time a program is being const:ruct:ed or modified (or a 
person is leaimng) , we want it to be flexible enou^ to 
assimilate new bodies of information. There should be a 
capacity for grcwth of knowledge, not a rigidity that freezes 
either the depth or breadth of the program's knowledge. 



SCME APPLICATIONS 

Scaofte of the types of problems for ^Aiidx expert syst:ems have been 
constructed aire shewn in Table 2, Many of these, such as small 
troubleshooting assistance programs, are relatively strai^tforward, 
Althou^ the state of the art is difficult to quantify, the programs in 
the treble represent the kinds of commercially robust systems that can 
be built for NASA today, provided adequate resources and an appropriate 
problem. We don't have an adequate ta^^Dnony of problem types. Many of 
these overlap, in being different forms of data interpretation, for 
exaitple. Even this brief characterization, however, provides a 
reasonably good idea of \Aiat e55>ert sj^tems can do. 

In general, e)q)ert syst:ems can reduce costs or increase quality of 
goods and services — in a single phrase, they can increase productivity 
in an organization. If you believe either that there is not enou^ 
e^q^ertise in the world, or that it is not well distributed, then you 
will be willing to ent:ertain the idea that putting human &qpertise into 
an easily-replicat:ed form may answer some productivity problems. Or, 
at least e>q)ert systems may provide a partial answer. Consider medical 



118 



TABLE 2 Scjne Problems for which Expert Systems are Providing 
Solutions 



RISK ASSESSMENT 
EQUnWEMr DIAGNOSIS 
CXS^FIGURAKCN 

IXJADING 

RXJTE PLANNING 

DMA IKTEREREEATION 
SCHEDULING 
IHERAH^ MANAGEMENT 
ICNITCKENG 

PORTPOLEO MANAGEMOT 

TODUBIESHOariNG 
MANUEACrURING STEPS 

CKOP MANAGEMENT 

EQUHMENT DESIGN 

TOAINING 

S0PIV2ARE OONSULEANT 
EQCJUMENr TONING 



St. Paul Insurance Oo. — assess risk of 
insuring large cxanmercial clients 
Genercil Motors—detentiijie causes of 
vibration noises and reocanmend r^irs 
Digital Bquiponaent Corp. — translate 
custoroers' orders for ccatputer systems into 
shipping orders 

U. S. Army — design loading plan of cargo and 
equipnoent into aircraft of different types 
U. S. Air Force— plan an aircraft's route 
frm base to target and back to avoid 
detection and threats vAien possible 
SchliHiberger— interpret down-hole data froa 
oil well bore holes to assist in prospecting 
Vfestin^icuse— plan manufacturing st^ in a 
plant so as to avoid bottlenecks and delays 
Stanford Medical Center — ^assist in managing 
Kulti-st^ chemotherapy for cancer patients 
ISI~monitor operations of MVS operating 
system 

U. S. Environmental Protection 
Agency—determine vMcJi requests for 
informaticai fall under the exertions to the 
Freedcm of Information Act 
First Financial Planning Systems (Travelers 
Insurance)— analyze an individual's 
financial situation and recoanmend types of 
investments 

Hewlett Packard — diagnose causes of 
prctolems in photolithography st^ of wafer 
fabrication 

Virginia Polytechnic Institute - <PCMME> 
Assist in managing apple orchards 
Delco— design special-purpose, low voltage 
electric motors 

Elf Aqoitair^ Oil Ocarpany— demonstrate 
reasoning to find cause of drill bit 
sticking in oil well and to correct the 
problem 

Shell Oil Corporation— advise persons on 
viiich subroutines in large FORERAN library 
to use for their problems and hew to use 
them 

lawrence Livermore Nationail 
laboratory— specify parameter settings to 
bring a sensitive instrument (triple 
quadripole mass spectrcsneter) into alignment 



NOTE: Many more exanples are listed in Buchanan (1986) , and Harmon 
(1986) . 
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diagnosis. Specialists at university inedical centers generally see more of the 
vmusual disorders than a rural practitioner and thxis stand a better cdiance of 
diagnosing them correctly. Putting sane of that e55)ertise more directly at the 
service of the naral practitioner could allow more effective treatment, and 
save patients the time and trouble of travel to the medical center. 

Or consider troubleshooting a cortplex piece of equipment. Persons with the 
most field experience are often the ones promoted to desk jobs in the central 
office. When subtle ccattoinations of cavises keep a less ejqperienced field 
service technician from fixing a mechanical failvire, someone with more^ 
e55)ertise is needai. On earth, depending on travel times and the criticality 
of the work flow in the central office, calling the e>qperienced specialist out 
may be a very expensive repair procedure. 

TJje following situations are all cases where it may laake good sense to build 
an expert system: 

• too few specialists for the number of problems; 

s specialists not at the sites of problems vihen they occur; 

e long training tinae for a specialist; 

e hi^ turnover among technicians; 

0 combination of complex eqiiipment and poorly trained technicians; 
9 organization's best (or only) specialist in an area is nearing 
retirement; 

9 too many factors for a person to think throuf^ carefully in the time 
available. 



KEY C30NCEPIS 

The four goals that characterize expert systems can be achieved with a few key 
methodological ideas. In this section, the key ideas will be introduced; in 
successive sections they will be elaborated on so as to e5q)lain a little how 
they work. The main organizational principle of expert systems * s to keep 
specialized knowledge separate from the logical and heuristic inference methods 
that use it. Ihis is easy to say but difficult to follow, for reasons that 
will be described later. 

Keep Domain-Specific Riowledge 
Separate from General Reasoning Methods 

— KEY IDEA #1 ~ 

Another key concept, vMch is imported from principled design of software 
generally, is modularity. (The first key idea is an instance of this, but that 
instance has taken on more iirportance than all the other instances of the 
general concept.) Modularity at the level of knowledge about the problem area 
iaplies conceptual separation of elements in the knowledge base. For exaitple, 
medical knowledge about penicillin, althou^ not totally independerit, can often 
be separated from knowledge of other drugs. It can be modified in major ways, 
or deleted, without altering the program *s knowledge of other drugs. So, this 
is to say that the concepts used to talk about objects in the domain should be 
chosen so as to allow talking separately about an individual object, a single 
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prcperty of an c&ject, or a single relation of one type of object with 
another. Modularity at the level of programming constructs iirplies that the 
program's internal representation of knowledge elements (e.g., objects, 
properties, relations) is similarly "clean". 

Ke^ independent pieces of knowledge independent. 
Ifeep the rest as nearly-independent as possible. 

—KEY IDEA #2 ~ 

A third key concept is imiformity of conceptualization and representation of 
knowledge. Ihe underlying intuition is that it is easier for a person or a 
program to build, understand, and modify a bocty of knowledge if it doesn't mix 
and merge a variety of different of things. Ihis is as true at the 

knowledge level as at the programming level. For instance, one of the most 
ccmpelling aspects of Newton's Laws is that all physical bodies are treated as 
quantities with mass. He didn't need one set of laws for planets and another 
for ^les. So it is desirable to build an expert system with a "conceptually 
clean", well-organized, siirple collection of concepts. And it is inportant to 
i:se a sinple, well-organized collection of programming constructs as well. 
Otherwise there are too many different kinds of things to keep track of and 
reason with. 

Hiere is more dispute among AI specialists about this principle, ihere are 
good reasons to violate it, as we shall see, in the interest of being able to 
say more about the objects and relations of interest than can conveniently be 
said in a single language. We are frequently told by bi-lingu^a friends, for 
instarase, that there are some concepts that jiost can't be ei^ressed fully in 
English. The same is true for programming constructs, but the basic principle 
for constructing ei^jert systems is to try to maintain unifonnity as much as 
possible. 

Strive for uniformity of lane jage 
and programming constructs 

~ KEY IDEA. #3 — 

A fourth principle is to design the expert system to mirror the ways eiqoerts 
think about problems in their domains. Ihat means using the same terms and the 
same rules of reasoning as the ej^jerts use. One reason for this is that 
building and debugging a knowledge base depends necessarily on the es^jert, and 
using less familiar terminology or methods will introduce confusion and error 
before the knowledge base is completed. Also, after it is coitpleted it needs 
to be ocstprehensible and unambiguous to the practitioners using the system or 
else confusion and error will result. 

Note that we are assuming here that the expert designing the system knows 
how to make it understandable to users. Great care must be taken v^en building 
a system, however, to insure that this assunption is true. 

There are times when this principle will be, or should be, violated. For 
exanple, vdien efficient cornpiter a].gorithms can solve part of a problem, it 
doesn't often make good sense to use anything else for that part, even if the 
e3q)erts don't think about it in that way. 
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As iroich as possible, vse the sam vocaboLary and 
inethods in the program as the e5$>erts and 
practitioners lase. 

~ KEY IDEA #4 ~ 

These key ideas help us achieve all of our four goals in the following ways. 

e EERPQRMANCE — in problems vAiose solvition methods are not already well 
formalized, \daich are considerable, much of the effort in building a 
tax^wledge base frcm an expert sysfeam lies in building the conceptual 
framework. Which properties and relations of objects to describe is 
often not well specified at the beginning. So the knowledge base is 
built incrementally, where es^^erience with one knowledge base guides 
future modifications, extensions, or reformulations. 

9 EEASC»IIN&— When the solution methods are not well charac±erized, it is 
important to encode heuristics that experts say they use. Storing these 
separately and in a siirple form allows them to be changed easily. Since 
it is nearly iitpossible for an e55)ert to articulate a conplete and 
consistent set of heuristics at one sitting, it must be easy to add, 
remove, or modify the heuristics that determine the reasoning. 

o UNDERSTRNnABIIZ[Y---with modularil^/ individual elements of the knowledge 
base can be displayed meaningfully in isolation. Moreover, with the 
separation of knowledge base and inference procedures it is possible to 
peruse the knowledge base in order to find just those elements that were 
xased to reason about a new case. And with xmiformity of data 
structures, it is possible to build one set of procedures that produce 
e}5)lanations. 

9 FTfymiLITY—vdien the elen^aits of the knavledge base are in separate 
data structuires, and not intertwined vdth code for inference procedures, 
we can add more knowledge with considerably more ease. When the 
individual items in the knowledge base are nearly separate, we have 
fewer interactions to worry about when w^ change an items. And viien the 
representation is homogeneous, we can more easily write other programs 
that act as "editing assistants" or ej^lainers that help us insure 
correctness of new items arjd help us understand vtot is in the knowledge 
base. 



PERFORMANCE ISSUES 

E35)ert systems constitute one class of ccirputer programs. As such, they work 
the same way as every other program: they process input data to produce output 
data. But the nature of the processing is different from most conventional 
programs. The key ideas mentioned earlier are the key differences, in the 
design and implementation of e)5)ert systems. 

In order to design a reasoning program, we need to provide knowledge to 
reason with and reasoning methods to lase. Both are needed. A 
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powerful thinker needs something to think about, and a hody of fac±s 
without methods for using them is sterile. Over the last few decades, 
research in AI has elucidated programming methods for making inferences 
and storing knowledge. We briefly characterize these tc^ics below, 
althou^ with some reservations about oversiitplifying, in orxter to 
hi^i^t research issues relevant to increasing the performance of 
e3$)ert systems. In addition to research on inference methods and 
representation of knowledge, several other issues are mentioned briefly 
as needing more research in order to ijtprove the performance of e>a)ert 
systems. 

Inference ifethods 

Aristotle's theory of the syllogism defined acceptable inference 
methods outside of mathematics for about 2000 years. His theory has 
been extended in this century by Russell & Whitehead, and others, in a 
formal theory that inclxides methods of reasoning with several 
statements and several variables in an argument. 

Formal logic defines several inference rules which are guaranteed to 
create true conclusions if the premises of the argument are true. The 
chain rule (modus ponens) is the single most important inference rule 
in ej^jert systems, it allows us to chain together a string of 
inferences: 

If A then B 
If B then C 
If C then D 
A 



D 

Many of the inferences we make in our lives are not guaranteed by 
the rules of logic, however, nor do we have certain knowledge about the 
trt±h of our premises. Whenever we argue that the future will be like 
the past, as in stock market predictions, we have to be prepared for 
exc^ions. Ihese inferences, labeled "plausible inferences" by George 
Polya, are the ones of most interest in AI. 

One set of prograramiiig methods were in AI for making plausible 
inferences is to assert the facts categorically— as if they were known 
to be true with certainly— and then reason about exertions that mi^t 
force revisions to the conclusion. 

Another set of methods deals e3q)licitly with the degrees of 
uncertainty in the facts and in the associations. MYCIN (see ;^)pendix 
A) uses this style of reasoning. Usually the degrees of lancertainty 
implied by words like "often" and •'may" are expressed as numbers. And 
often these numbers are interpreted as prtibabilities. 

A third, and most powerful, set of methods is to introduce heuristic 
rules, or rules of plausible inference, into the reasoning. These are 
facts or relationships that are not guaranteed to produce correct 
conclusions, but will often do so. Moreover, they often produce 
answers more quickly than their algorithmic counterparts. In the 
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travelirjg salesman problem, for exaitple, the problem is to plan a route 
for visiting each cil^ in a set exactly once and end at the home city. 
This is an NP-coirplete problem, that is, the algorithm for solving it 
takes tjjnes that is e>^nential with the number of cities. One 
heuristic we may introduce is to go to the nearest city that has not 
yet been visited. Hiis certainly speeds vp the conputation of the 
route, but may (and probably will) miss the route that is shortest 
overall. Some rules of plausible inference used, with caution, in some 
e35)ert systems are shown belcw: 

e Satisficing: If it will be e5?)ensive to find the very best 
solution to a problem, then stop with the first solution that 
satisfies easier criteria of being good enou^. 

® Inheritance: (Some specified) properties of a vAiole are shared 
by all its parts. E.g., An ice cube is cold and hard. Pieces 
of an ice cube are cold and hard. [But other properties, like 
••wei^t", do not behave the same.] 

e Single Fault: If a piece of equipment (or any organized system) 
is malfunctioning, and one hypothesis e55)lains the problem, then 
there probably is only a single cause of the problem. 

9 Ooirpelling Evidence: If you have gathered a lot of evidence in 
favor of hypothesis HI, and very little evidence against it, and 
you have gathered little positive evidence for alternative 
l^^potheses, then HI is a plausible hypothesis. 

e DeconposabililYs If there aire many parts to a problem that are 
nearly independent, assume they can be solved independently. 
Then adjust the corrposed solution to take account of known 
interactions. 

e Parsinony of Design: Designs or plans with fewer elements are 
preferred to those with more. 

In principle, the rules of inference (both logical and plausible) 
may be applied again and again to a situation description, in any 
order, and the resulting conclusions will be the same. This is not 
always possible in practice, hcwever. There may not be enou^ time to 
reason e>daaustively about all possibilities and contingencies. For 
that ireason AT researchers talk about controlling the inferences as 
being a more iirportant, and more difficult, problem than making the 
inferences. 

Controlling inferences breaks down into two subtasks: (a) deciding 
vMch rules to apply now, at this stage of the problem-solving process, 
and (b) deciding viiich part of the problem to work on new. Since we 
believe these subtasks require some intelligence, all of the principles 
for building knowledge-based systems also apply at this level of 
reasoning In particular, it is desirable to make this control 
knowledge esqjlicit and separate from the inference methods 
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Representation of Knowledge 

We have said that a key idea in building ej^jert systems is storing 
knowledge separately from the inference methods. Another key idea was 
to avoid, as much as possible, representing it in a low-level conputer 
language. But we have not said how to represent for the cotrpater vAiat 
an ejqjert wants to tell it. English is too difficult for a computer to 
interpret unambiguously; KSXTBM and BASIC are too low-level for an 
expert to deal with efficiently. Clearly we need some stylized 
representations that are sonvesdiere in between. 

AI researchers have developed several different representation 
irethods. ihere is no single one that is best in every case— they each 
have strengths and weaknesses One of the fundamental trade-offs in 
thinking about the representation of knowledge is between sirtplicity 
and ejqpressive power. We want a siirple set of conventions for storing 
knowledge because that makes it easier— for a person or a program— to 
understand \i*iat is ir the knowledge base at any moment, it is al.?o 
easier to write siitple statements without error. Aristotelian logic 
('•All As are Bs", etc.) and arithmetic are simple representations, ihe 
difficulty is they lack the expressive power to let iis say everything 
we think is important about a problem. A hundr^ years ago DeMorgan 
noted the lack of ej^jressive power is Aristotelian logic (and a 
weakness in its inference methods) : if you know that all horses are 
animals, he said, you cannot prove that the head of a horse is the head 
of an animal. _ Ihis sort of problem led Russell & Whitehead to develop 
a formalis m with more ej^ressive power. 

There are two major classes of representation methods, reflecting 
two different ways of viewing the world: action-centered or 
object-centered. Different problem areas may focus on one or the 
other, or different ej^jerts in the same problem area may. For exaitple, 
physicians talk about disease and classes of diseases as entities with 
expected prqperties and also talk about clinically relevant actions 
that determine ^4t]at to do— e.g., asking questions, measuring things, 
relating signs and symptoms to possible causes, matching likely causes 
to acceptable therapies. Neither point of view is wrong, but they 
focus on meidical phenomena quite differently. And an expert system 
would similarly have one focus or the other. 

Action-centered representations foais on conclusions that can be 
drawn frcm facts or, more generally, on relations between situations 
and actions. The formalism of mathematical logic is one popular 
choice. Another popular formalism is rules. 

^ Object-centered representations focus on the organization of objects 
in the world, for instance into hierarchies. They still allow 
conclusions to be drawn v*ien an object is found to have some 
prqperties, but those inferences are triggered from "within" an object 
rather than from outside. Ihat means that objects and their 
properties— and changes to any of them—drive the inferences. But in 
an action-centered model, the jjiference nales drive the creation of new 
objects and prqperties. Ihe net effect may be identical, as v/e said, 
but the way one thinks about the domain of discourse is distinctly 
different. 
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Also, in cibject-centered renrssentations there is rore machinery for 
saving storage space by xising hierarchies. Properties of classes of 
object, for exairple, may be iitplicitly inherited by all of the 
instances without having to store it with each instance. The manager 
of a graap is the manager of each person in the group, so the program 
only neecJs to store (once for each group) the name of the gxxyap manager 
and can use that, plxis the class-instance hierarchy, to find the name 
of any individual's manager. 

There are as many different conventions for representing knowledge 
as there are AI researchers working on this topic. This can be 
oonflising when reading the literature. But they are basically all 
variations — usually mixtures— of the two different styles just 
discussed. There are many e55)ert systems built out of these two sets of 
idea., but considerably more ejiperience — ^and analysis — is necessary to 
understand their strengths and limitations. 



Validation and Robustness 

It is inpossible to prove logically that the contents of an expert 
system's knowledge base are correct or coitplete or that the inference 
procedures will always provide the best answers. Yet persons in a 
space station v*iose equipment and lives depend on the e:?)ertise of mai^ 
systems need to know the scope and limits of each system. Or, 
alternatively, they need tools for determining the scope and limits of 
the programs they lose. These range from better ejqplanation systems to 
tools for checking knowledge bases. 

Spatial and Teirporal Reasoning 

Many corrplex prd^lems in a space station reqiiire autonomous cortpat^ 
programs that represent and reason about three-diitiensional objects. 
Siirpler representations do not allow programs to solve problems 
involving 3-d shapes and positions, such as problems of fitting parts 
or of maintaining some equipment. Building expert systems requires 
attention to making the systems' reasoning understandable to persons 
onboard the space station and changeable by them. That, in turn, 
requires a flexible, hi^-level description language as well as 
computationally efficient operations that iitplement the language. 

similarly, reasoning about sequences of inter-dependent actions and 
about situations that may change at arbitrary times are important 
aspects of problem solving in space. 



Very Large Kiowledge Bases 

To date e>^)ert systems have used knowledge bases of modest size. With 
the complexity of operations in space, we need to design ax)d maintain 
expert systems with very large knowledge bases. Althou^ size is 
difficult to define, most knowledge based mention only a few thousand 
different facts ard relations. Probably the largest today is the 
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INIERNIST system in vMch about 250,000 facts are enccxJed (Miller et 
al., 1982) . Same of this limit results from our own inability to keep 
in mind the interrelationships among more facts as much from the 
technology of storing and retrieving them. We must improve the 
technology to mate it easier to build and maintain knowledge bases of 
madi larger scale, vMch will be necessary in a system as large and 
coirplex as the space station. 



Shared Knowledge Bases 

Today's systems use single knowledge bases that have been built 
specially for them. As more and more systems are constructed, however, 
it will be iitportant to use knowledge bases in different contexts and 
then reuse one system's knowledge base in another system, it is 
wasteful— and should not be necessary—to di^jlicate the contents of an 
old knowledge base in a new application. One should expect, for 
example, programs in the space station that reason about the function 
of life si^jport equipment and others that reason about the mechanical 
structure of the same eqiiipment, both of which must share considerable 
detail about the equipment itself. 



Distributed Databases 

Databases exist now on many machines. Yet it is nearly iiipossible to 
treat several of them as if they were one logical unit— from airy 
program. Ej^jert systems also need this capability. Current researxdi 
will allow much broader sharing of data among different databases than 
IS currently available in canmercial systems. Uiere will be many 
conpaters in the space station, it is much sounder to think of 
separate specialized databases (with appropriate backup) that can 
accessed from various programs than to consider separate copies of 
every data base on every machine. 



Parallel Conputation 

Conpiters are fast, but never fast enou^. in addition to the immense 
speed-i^ from ijiprovements in the hardware, there are potential 
speed-i^ from software. When a problem can be divided into nearly 
independent subprbblems, it is conceptually easy to see that multiple 
computers could be used to solve the subprbblems in parallel, thus 
saving considerable time. Work in the research laboratories indicates 
that this is feasible. Thus it will almost certainly become a 
commercial reality in the near future if it is cost-effective. 
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DEVELDiMENT AND MAINTENANCE ISSUES 

Building an expert system requires finding out how an expert solves a 
prt±)lem and translating that e^q^ertise into a stylized form that cm be 
read by computer. Ihis is no different in principle from building a 
conventional program in vMch programmers find out ^f^hat equations or 
algorithms e5$)erts use and then write FORERAN or C»BOL programs that 
eiiibcc^ those procedures. Ihe main difference in practice is that 
e5q)ert systems must incorporate knowledge that is much more qualitative 
and jiidgmental. In fact, much of the time the e^^jert's "know-how" is 
not yet written down and what he/she does is regarded as an art. 

Because the e5q)ert's knowledge is often not already codified and 
because writing symbolic reasoning programs is itself often regarded as 
an art, building an e>qpert system requires patience. It generally 
works best as a team effort involving one or more e^qjerts and one or 
itKDre so-called knowledge engineers. A knowledge engineer is a 
programmer of knowledge-based systems who understands the conventions 
of the cccrputing framework and ^o assists the expert in mapping 
jvdgrr^sntal knowledge into that framework. The dialogue between e^q^ert 
and knowledge engineer is often called "knowledge engineering". 

One of the key ideas in knowledge engineering is to focus on case 
studies. It is much easier for any of us to tell san^eone how we would 
approach a specific situation than to say in general terms how we solve 
problems of a type. Of course, if we have a set method (sometimss 
called a "canned procedure") that we always use, we can say that. "Oh 
yes, I always use the French variation of the Alekhine-Gorbachev wave 
theory in situations like that", you mi^t say. But then the knowledge 
engineer wants to knew what do you do next and — more 
interestii>gly— when would you make exceptions to your set policy. And 
the best way for you to think about those things is to focus on cases. 
As long problem solving requires more than the application of set 
procedures, kixwledge engineers will need to go through many cases, and 
variations on jim, to help codify the e^qpert's judgemental expertise. 



Steps Involved in Knowledge Errgineering 

It may take months or years to build an expert systems, with the time 
depexriing largely on the conplexity of the problem and the extent to 
vMch expertise is already codified. One reason it takes so long is 
that there are many steps involved. And at each step, the knowledge 
engineer or the e:$)ert may decide it is necessary to undo some results 
of previous steps. Very rou^y, the steps are thou^t of as 
beginning, middle ,^nd end phases in which attention is focused on 
different aspects of the system, as shown below: 

• Beginnir>g — define the problem precisely; understand v4iich 
concepts are used, vtot their definitions and 
inter-relationships are. 
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9 Middle— iirplement a substantial prototype after choosing a set 
of representation conventions and writing a small bat 
substantive knowledge base. 

9 End — fill out the knowledge base to fix errors and exterd the 
scope of the system's problem solvirg abilities, both of vAiidi 
are generally discovered by testing the systems on many test 
cases* 



Tools to Aid in the Construction of Expert Systers 

Just as carpenters can construct houses faster with the ri^t tools, 
knowledge engineers car build ejqpert systems faster with software tools 
that boost their productivity. These cane in several forms- The main 
idea, hcwever, is to provide programmers with mechanized intelligent 
assistants that know about programmirg convention^' (including 
abbreviations and shortcuts) , that uan help locate and fix errors, that 
can display the contents and interrelationships in a program or 
knowledge base, ?\nd so forth. These are the kinds of extra 
capabilities that distinguish system-building environments from 
programming languages. 

Sane of the more powerful environments — sonetimes called shells— are 
shown belcw. One characteristic of a shell is its conmitment to a set 
of representation conventions of the sort outlined previously. See 
Table 3. 



At present, e^^^ert systems do not learn from e^^jerience. This is a 
defect that many research groi5>s are working to remec^. Early 
prototypes of leamii^ systems pronise sane autonated assistance in 
maintaining and extending a knowledge base throucdi the exjDerience of 
routine use, but these are not yet available. 



TABLE 3 Sane Canmercially Available Shells for Buil'""'ing Expert Systems 



Learning 



S.l 

KEE 



Teknowledge 
Intellicorp 
Carnegie Group 
Inference Corp. 
Xerox 

Texas Insi ruments 

Teknowledge 

JEM 



Khcwledge-Craft 



ART 
IDOPS 



Personal Consultant 



M.l 

ESDE 
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It is possible, however, to learn an initial set of rules from 
case library (collected past e>5)erience) and use it for classification 
problems • Induction programs are being used to build sinple rule sets 
for e>q)ert systems in vMch there is little chaining of the rules and 
little vse of uncertain inferences* These are largely marketed in 
Great Britain viiere it is better understood that even sirtple problems 
may carry great economic leverage. Current research is extending the 
scope of induction programs to more coirplex rule sets. 

Resources Required 

Hie major cost involved in buildii^ an e35)ert system is in personnel 
time. Shell systems now run on most common conpiters, so it is not 
necessary to biy new equipment ajnd, most iitportantly, it is not^ 
necessary to build the cairp?ete set of programming tools found in a 
shell. 

Purchasing the shell aiid some training in how to lose it are 
reccranended. The aityount of tune needed from a team of e:q)erts and^ 
knowledge engineers is variable— as are their salaries. Table 4 gives 
some estimates for a hypothetical femall system constructed within an 
existing shell. 

It is assumed here that a problem has been precisely defined before 
beginning, that a case library of at least a half dozen typical and 
hard cases has been assembled, that a commercial shell has been 
purchased and runs on an available cortputer, and that the senior 
knowledge engineer is very familiar with both the shell and the 
cotiputer. It is also assumed that the team's primary responsibility is 
this activity, and that they have the blessing of their management. 

In this simple model, the senior knowledge engineer also fills the 
role of project leader, with as much as half his/her tiii^ ^^^^^ ^^'^ 
reports, brief ijigs, budgeting, ax^ other managerial responsibilities. 
The junior knowledge engineer in this model is responsible for software 



TABLE 4 Percent Time Per Quarter 





Ql 


Q2 


Q3 


Q4 


expert 


75 


75 


100 


75 


sr.KE 


100 


100 


100 


100 


jr.KE 


100 


100 


100 


100 



NOTE: J!^roxjjnate percentage of tiine required from an expert, a senior 
knowledge engineer, and a junior knowledge engineer to build a 
hypothetical small system over four quarters of a year. The two main 
variables in determining the amount of time required are the nature of 
the problem axxi the definition of the deliverable. 
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engineering— that is, integration of the eqpert system into the 
run-time environment— as well as for help in building the knowledge 
base. And the expert, here, is (atypical ly)) also fillirig the role of 
"management chanpion" with some time devoted to securing resources to 
make the project happen. 

One of the main factors that deteritiines the length of time a project 
will take is, not surprisingly, the nature of the problem. This 
includes both the scope of the problem and the extent to vMch a 
ccaranercially available shell is appropriate for the problem. Another 
main factor is the definition of the "deliverable", that is the terms 
of the contractual agreement specifying \diether the prxxJuct delivered 
is a prototype or is a smoothly polished software package. 

Ihere are added gains in building an expert system that offset some 
of the costs just mentioned. Besides the obvious gains showing up in 
work performed, there are very noticeable gains in the quality of 
information available. 

Shortening the time required to build systems and increasing our 
ability to maintain them are thus two of the central issues for putting 
ej^^ert systems in the space station. 



ENVIRONMENTAL ISSUES 

The environments in vMch expert systems currently operate are closely 
constrained. While there is wide variation in the degree of autonomy 
eidubited across all working systems, most systems in place are 
interactive, requiring intelligent ii^jut from humans. The predominant 
model of interaction is a consultation model in vMch an e}^)ert systems 
asks a person for the facts (and interpretations of them) and then 
provides some advice. A consultation with MYCIN about a medical case 
IS shown in the ^^jpendix. 

There are several reasons vtiy the consultation model is appealing, 
each of ^Aiidti constitutes an opportunity for research. In the first 
place, a program that asks short-answer questions of a person can 
finesse the very large problem of understanding free-form English 
sentences and phrases. The program knows v*iat answers are reasonable 
m the current context and can have advance ej^jectations about the ways 
these answers may be framed. 

Second, the consultation model provides a strong sense of context 
which not only helps the program understand a person's answers, but 
helps the person understand the sense of the questions. This is 
iirportant because misinterpretation of the program's questions can have 
serious consequence. 

Third, in a consultation it is reasonable to make strong assuitptions 
about the users of an expert system—vAiat they know, vdiat they don't 
know, what vocabulary they use, vdiat environment they are working in, 
and so forth. This helps minimize problems in communication. This 
means also that so-called "common sense" knowledge may be supplied by 
users and need not all be si^jplied by the program. 
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Real Tiine Itonitoring 

As e5?)ert systems beccme faster, it will be easier to build systems 
that monitor other devices or processes with rapid charyges. 
CSonceptually a difficult problem is managing time-dependent relations 
efficiently, vMch is one of the necessary coroponents of a nonitoring 
system. Bie large aiaofunts of data received and the speed with \«iich 
th^ are received are also critical issues. Integrating AI methods of 
reasoning about the data with numerical methods for digitizing and 
filtering is essential. 



Richer Irpit/Oui^t 

No one likes to interact with corcfjuters by typing. Considerable work 
on interactive graphics has reduced the need for typing. But it will 
be even easier \dien we can communicate with programs by giving voice 
commands and receiving spoken English output in return. 



Models of Users and Situations 

No single style of interaction is best for all users at ail times. 
Specialists do not need explanations of the meanings of terms, for 
exaitple, vMle less exqperienced users used considerable help 
vmderstanding the context of the problem. Also, the criticality of the 
situation may demand taking shortcuts in data acquisition or reasoning 
to reduce the risk immediately before taking a more systematic, 
detailed look at the problem. Expert systems must be sensitive to 
models of both the viser and the situation in order to request 
appropriate input, reason at an appropriate level of detail, and 
present conclusions and suggestions in an appropriate way. 



CONdUDING OBSERVATIONS 

Expert sj^tems already are saving organizations millions of dollars and 
performing tasks routinely that ordinarily require human expertise. 
The number of applications of today's tedinology is nearly 
boundless — consider, for exaitple, the nimiber of pieces of equipment in 
a space station that we don't readily know how to fix. The first 
commercial shells on the market are robust enough to be i:ised 
effectively. Integrating intelligent systems with conventional 
conpiter programs and with persons in the space station involves new 
research in many dimensions. The single biggest advantage of AI 
programs, airply demonstrated in expert systems, is their flexdbility. 
This matdhes precisely the single biggest design requirement on 
software in the space station. 

Vlh^xt we sciB now is just the beginning of a wave of intelligent 
sott^^axe that can have as great an effect as business data processing 
software. It is impossible in any area of technology to make accurate 
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predictions. However, there are many parallels between the growth of 
ej^jert systems and of cxatputing harckvare, with about a 25-30 year lag. 
When electronic ocaiputers became available conmercially, b\isinessmen 
began to ask about afplications that would make a difference to them. 
Jn 1955, several of these innovators assembled at Harvard to discuss 
cheir ejq^eriences. SaaiB of the conclusions they drew frm their early 
e5q)erience are summarized below (Sheehan, 1955) : 

1. "Ihe initial overenthusiasm, vMch inevitably accotpanies a 
project of this scope, can axxi does make the jcA) harder. Too 
many people had the ijtpression that this was the answer to all 
problems. Perhaps it is, but we haven't been smart enou^ to 
develop all of them. . . 

2. "Some of our original thiilking has been partly confirmed in that 
the greatest benefits to be derived from a conputer will 
prdDably consist of information iitpossible to obtain 
previously. . . 

3. "Our e:q5erience has shown that the ccarputer is more adaptable to 
some projects than others. . . 

4. "Programmers should be recruited within your own company. . .It is 
easier to teach loen the required conputer and program techniques 
than to acquaint them properly with the caiplex procedures and 
routines of modem-^y industry. . . 

5. "I doubt if it is possible to overerrphasi?;e the desirability of 
providing for convenient corrections or deletion of errors in 
data... 

6. ''Bie maximum justifiable amount of flexibility for extending or 
integrating applications must be included in the initial 
programming. . . " 

The parallels with ejqpert sj'stems are clear: we have just begun to 
ejqplore the first set of applications and have only a limited view of 
possibilities in the future. Over the next 5-10 years, however, we do 
Jaicw vdiat extensions in capabilities will be possible because they are 
the ones that are active research areas in the present. 

Future develcpnenus will make the technology more broadly applicable 
and easier to use. Every professional activity—from medicine to 
manufacturing — contains many problem solving tasks that are not 
mathematical. Ihe develcpnent of artificial intelligence methods that 
can solve many of these kinds of prcfclems will change the nature of 
applications of computers iti cur society as much as the development of 
transistors changed the architecture and applicability of conputers 
themselves. 
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Appendix: Annotated 
Typescript of a Sample 
MYCIN Consultation 



Instructions for Users at the Start of an 
Infectious Disease Consultation (Optional) 



[Here, as elsewhere, the responses typed by the user follow a dout)le-asteni>k prompt } 
MYCIN 3-Jun-78 
Special options (type '> for help) 

Instructions'? (Y or N) 
YES 

This ts a computer program named MYCIN that has been designed to advise you regarding an appropriate 
choice of infectious disease therapy It is understood that you have a patient v/ho may have an infection Please 
answer the following questions, terminating each response with RETURN To correct typing errors, use the 
DELETE key to delete single characters. <ctr1>W to delete a word, and <ctrl>Q to delete the whole line 

If you are not certain of your answer, you may modify the response by inserting a certainty factor (a number 
from 1 to 10) in parentheses after your response Absolute certainty (10) is assumed for every unmodified answer 
It IS likely that some of the following questions cannot be answered with certainty 

You may change an answer to a previous question in two ways If the program is waiting for a response from 
you (th?t IS. has typed **). enter CHANGE followed by the number(s) of the question(s) whose answers will be 
altered You ma^ also chanqe a previous answer at any time (even when the program is not v/aiting for a 
response from you) by typiiig <ctr1^F (Fix), which will cause the program to interrupt its computation and ask 
what you want to change (If the response to <ctrl>F is not immediate, try typini, the RETURN key in addition ) 
Try to avoid going back because tha process requires reconsidering the patient from the beginning and therefore 
may be slow 

Note that you may also enter UNK (for UNKnown) if you do not know the answer to a question. if you wish to 
see a more precise definition of the question or some examples of recognized responses. '^'^ if you want to see all 
recognized responses, the word RULE if you would like to see the decision rule w.'nich has generated the question 
being asked, the word WHY if you would tike to see a more detailed explanation of the question, or the letters QA 
if you would like to interrupt the consultation in order to ask questions regarding the decisions made so far in the 
consultation If you are ever puzzled about what options are available to you during a consultation, enter the word 
HELP and a list of options wilt be listed for you 

Sample Response (user input foMows the **) 
Does the pationt have a risk factor for tuberculosis'? 

••9 
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Appendix: Annotated Typescript of a Sample MYCIN Consultation 

One or more of the following are considered risk factors for TB a) positive PPD (5TU) b; history of close cor c»ct 
with a person having active TB c) household member with a past history of active TB. d) chest X-ray showing 
apical scarnng. e) granulomas seen on biopsy of any organ tissue 

expected responses are YES NO 
Enter HELP for user options 
YES 

SUMMARY 

(type ctrl-0 to abort printout) 

UNK • Answer not known 



9 . 



Rephrases the question and gives examples of recognized responses 
Prints a list of all recognized responses 
RULE • Prints the current decision rule 

OA - Program enters question-answering mode 

Change # - Go back and re»request answe: to question number # 

COMMENT • Enter comments about any aspect of the system "s performance Your comments witl be 

fonwarded to those m charge of the MYCIN program 
WHY - Gives high-level explanation of the current reasoning chain that provoked this question 

HOW # - Explains hOW the system wil' achieve a goal referred to by number # m a previous 

explanation 

EXPLAIN - Provides a nx>re detailed explanation of a previous answer given by a WHY command 

FORGET - Resets the explanation of the reasoning chain back to lowest level, as if you never used the 

WHY'EXPLAIN commands 
STOP • Halts the program without completing the consultation 

SAVE - Halts the program, saving the current patient on a disk file, retrievable at a later date 

HELP . Prints this list 



A»2 Infectious Disease Consultation Session 



(This IS a typescnpt of a MYCIN consultation on an actual patient treated at Stanford MYCIN wds not used 
to suggest treatment Spaces hava been added for readability, and comments (in italics) have been 
inserted Otherwise it is a verbatim transcnpt User's responses follow double asterisks } 

PATIENT.538 

1) Patients name 

" P"^^^^ (Name age. sex. and race are always asked because they are INITIALDATA } 

2) Age 

"* 34 YEARS 

3) Sex 
•* MAEL 

= ^^^^ (MYCIN corrects msspeihngs J 

4) Race 

'* W^'"' (The user asks for an explanation in thiS instance it is tnvia' j 

(i e WHY IS It important to determine the race of PATIENT.538^j 

(1 01 The race of a patient is one of the 5 standard parameters that identify 
a patient 

T'lis may be useful later m the consultation Fo' example it is 
eievant «n determining the organisms (other than those seen on cultures 
or smears) which might be causing the infection 

(back to question 4 ] 

CAUCASIAN (This is the answer to the question about race i 

Please supply one answer under each heading if your response is not 
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Appendix: Annotated Typescript of a Sample MYCIN Consultation 

16) Please give the date on which ctimcal evidence (symptoms, signs, or 
lalwratory tests) of the meningitis first appeared 

29-Jan-77 22*15 

17) Does Pt538 have an abnorma' chest X-ray"? 
NO 

18) Does Pt538 have one or more of the following risk factors for TB a) 
positive intermediate strength PPD. b) history of close contact with a 
person with active TB. c) a household member with a past history of 
active TB. d) apical scarring on chest X-ray. e) history of granulomas 
on biopsy of liver, lymph node, or other organs'? 

NO 

19) Does Pt538 have any cutaneous lesions or rash on physical examination"? 
NO 

20) Does Pt538 have evidence of ocular nerve dysfunction*? 
NO* 

21) Is Pt538 a compromised host (e g aicohottc sickle-celi-disease. 
immunosuppressed)'? 

YES 

22) Is Pt538 immunosuppressed (e g corticosteroid therapy cytotoxic drug 
therapy, radiation therapy, leukemia, lymphoma)*? 

NO 

23) For how many days has Pt538 had abnormal neurologic signs'? 

••7 2 HOURS (Note that the answer was given in hours 

MYCIN has to be flexible enough to concert units J 

24) For how many days has Pt538 had neurologic symptoms'? 
•• 1 DAYS 

25) Has Pt538 had recent evidence of tender or enlarged salivary glands'? 
•• NO 

26) Has Pt538 been exposed to anv contagious disease recently (e g 
meningococcal disease mumps) '? 

NO 

Please enter Cr)F findings in the following table 

CSF Percent Protem CSF 

WBC PMN Glucose 

27) ^^ lOO 99 280 5 

28) Do you know the results of a recent CBC of Pt538'? 
•• YES 

Please enter CBC results m the follov;ing table 

WBC Percent Percent 

in 1000 s PMN BANDS 

29) ^^ 1 9 UNKNOWN UNKNOWN 

30) Has Pt538 had any injury or insult to O' defect in the central- 
^ervous-system (excluding neurosurgery)'? 

•• NO 

31) Has Pt538 ever undergone any type of surgery'? 
•• YES 

32) Does Pt538 have a history of NEUROSURGERY'? 
•• NO 

33) Does Pt538 live in a crowded environmenf? 
•• NO 

34) Do you suspect recent alcoholic history m Pt538'? 
" NO 

35) ts meningitis a hospital-acquired infection'? 
WHY 

(This IS a more interesting question requiring presentation ol the rule that caused question 35 to be 
asked Note that the first five clauses ol the rule have been investigated and question 35 is motivated 
by the last clause MYCIN first rephrases the question to give the user y/s interpretation ol the WHY} 



Peripheral 
Glucose 
UNKNOWN 
(Note that some information is missing } 
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Infectious Disease Consulution Session 

(t e WHY »s \X important to determine whether the infection was acquired 
while tht, patient was hospitalized'?) 

(2 0) This will aid m determining the organisms (other than those seen on 
cultures or smears) which might be causing the miection 
It has already been established that 
(2 1] the infection which requires therapy is meningitis, and 
(2 2) organisms were not seen on the slam of this pending CSF culture 
and 

[2 3) the type of the infection is bacterial, and 

(2.4) neurosurgery is not one of the relevant items from the history 

of Pt538. arKl 
(2 5] the age of Pt538 is greater than 10 days 
Therefore, if 

(2 6) the infection was acquired while the patient was hospitalized 
then 

there IS evidence that the organisms (other than those seen on 

cultures or smears) which might be causing the infection is e coli 
(.75) staphylococcus-coag-pos ( 3) pseudomonas-aeruginosa { 3) 
klebsiella-pneumoniae ( 5) 

Author. Yu 

(RULE545) 

[back to question 35 ] 

(MYCIN now requests the "Answer to question 35 again 

Instead of answenng, the user asks how cleuse 2.3 was confirmed / 

HOW 2 3 

I e HOW was It established that the type of the infection is bacteriaP] 

[Rather than pnnting the contents of the rufes. MYCIN shows the rule 
numbers and the strength of positive and negative evidence from each rule } 
The following rules concluded about: 

the likelihood that the type of the infection is bactenal 





Rule 


Yes 


(2 7) 


RULE148 


(19) 


[2 8] 


RULE500 


(51) 


[2 9] 


RULE501 


(95) 


[3 0] 


RULE502 


(97) 


[3 1] 


RULE526 


(98) 


[3.2] 


RULE504 


(97) 


[3.3] 


RULE524 


(98) 



Thus, It has been established that the type of the infection is bactenal 

[back to question 35...] 
HOW 2.5 

[i.e HOW was It established that the age of pt538 is greater than 10 days'?] 

In answer to question 2 you said that the age of pt538 is 34 years 

Thus, It has been established that the age of pt538 »s greater than 10 days 

[back to question 35. . .] 
Y 

36) IS Pt538 s clinical history consistent with EPIGLOTTITIS'? 
NO 

37) Is Pt538 s ctinicat history consistent with OTtTIS-MEOtA'' 
NO 

38) Has Pt538 ever undergone spter^ectomy'? 
NO 

39) Is Pt538 a bum patient? 

(Another explanation is requested } 
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Appendix: Annotated Typescript of a Sample MYCIN Consultation 

[i.e WHY IS It important to determine whether PATIENT-538 has been seriously 
burned?) 

[4.0] This will atd in determining tho organisms (other than those seen on 
cultures or smears) which might be causing the infection 
It has already been established that 
[4 1] the infection which requires therapy is meningitis, and 
[4.2] organisms were not seen on the stain of this pending CSF culture, 
and 

[4.3] the type of the infection is bactenal 
Therefore, if 

[4.4] pt538 has bee.i seriously bumed 

then 

there is suggestive evidence (.5) that pseudomonas* aeruginosa is one 
of the organisms (other than those seen on cultures or smears) 
which might be causing the infection 

Author. Yu 

[RULE578] 

[back to question 39 ] 

•* WHY (In this case, the user asks another WHY question, backing up the subgoal tree ) 

[i e WHY IS It important to determine the organisms (other than those seen 
on cultures or smears) which might be causing the infection?] 

[5.0] ... in order to determine the therapeutic regimen of PATIENT- 538 
11 

[5.1] information has been gathered about organisms isolated from the 
patient, Organisms noted on smears of the patient, negative 
cultures of the patient, suspected infections without 

microbiological evidence, current drugs of the patient and prior drugs of the patient, and 
[5 2] an attempt has jeen made to deduce the organisms which require 
therapy, and 

[5,3] You have given consideration to organisms (other than those 

seen in cultures or smears) which might be present, and found 
at least one organism which requires therapy. 

then 

determine the best therapy recommendation from among the drugs likely 
to be effective against the significant organisms 

[RULE092i 

[back to question 39 ] 
Y 

(MYCIN now prints /fs intermediate conclusions about the likely causes of the infection ) 

I have found evidence (RULE545 RULE557) that treatment should cover for E coii 
causing meningitis 

I have found evidence (RULE545 RULE557 RULE578) that treatment should cover 

for Pseudomonas*aeruginosa causing meningitis 
i have found evidence (RULE545 RULE557) that treatment should cover for 

Klebsieila-pneumoniae causing meningitis 
I have found evidence (RULE507) that treatment should cover for Oiplococcus- 

pneumoniae causing meningitis 

(Now MYCIN begins to ask questions related ro appropriate therapy) 

40) Does Pt538 ha/e focal neurological signs'' 
UNKNOWN 

/Some questions are motivated by the organism under consideration Thus 
the following lines sometimes provide useful contextual information to a user) 

[Determining which drugs are desirable for use against tlie E coli ) 
[Determining which drugs are desirable for use against the Pseudomonas- 
aerugtnosa ) 
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Infectious Disease Consultation Session 

(Oetermming which drugs are desirable lor use against the Klebsiella- 
pneurTX}niae ) 

(Determining which drugs are desirable for use against the Oiplococcus- 
pneurTX}niae. .] 

My therapy recommendations will be designed to treat for organisms that cither are very likely or. although less 
likely, would have a significant effect on therapy selection if they were present It is important to cover for the 
following probable infect.on(s) and associated organism(s): 

tNFECTiON-1 IS MENINGITIS 

^ lTEM-1 E.COLI [from clinical evidence only) 
' - lTEM-2 ' PSEUOOMONAS-AERUGINOSA [from clinical evidence only} 
* ' ITEM-3> KLEBSIELLA-PNEUMONIAE [from clinical evidence only) 
r ITEM^> DIPLOCOCCUS-PNEUMONIAE [from clinical evidence only) 

41) Does Pt536 have a clinically significant allergic reaction to any 
antimicrobia: agent'' 

NO 

[Considenng AMPIClLUN-ANO-GENTAMiCtN for use against INFECTlON-l ) 

42) Do you have reason to suspect that Pt538 may have impaired ,enai 
function'^ 

NO 

43) Pt538's weight rn kilograms (or <number> POUNDS)' 
" 70 

(Finally, MYCIN pnnts the best therapy it has found to maxwize the chances of effficttve coverage 
of the cause(s) of the infection white minimizing the number of drugs, their toxicity, and side effects J 

(REC'I) My preferred therapy recommendation is as follows 
In order to cover for Items <1 2 3 4>. 
Give the foltowing in combination. 

1) AMPICILLIN 

Oo$e: 3.5g (28 0 ml) q4h iv [calculated on basis of 50 mg,kg) 

2) GENTAMiCiN 

Dose 1 19 rT>g (3.0 ml. eOmq/2ml ampule) q8h iv [calctlated on basis of 

1 7 mg/Kg plus consider giving 5 mg q24h »ntrat!i8cal 
Comments. K^njtor S0(0ni concentrations 

S'Hce high coicentrauof^ / ' > iicilltns can maci.vate 
amti-ioglycosKjes. do not mjx those tno antibiotics in the same IV 
bottle. 



Do you wish to see ttie next choice therapy'^ 

■* YES (Other therapies can be examined.} 

Whk:h. if any, of Hte above drugs do you wish eliminated from consideration^ 
AMPICILLIN 

[Considenng GENTAMICIN for use against iiMFECTlON-i ) 
[Consklenng PENICILLIN for use against INFECTION'-I .) 

[REC-2) Next best therapy recommendation* 
In order to cover for Items <1 2 3>' 
Givo: GENTAMICIN 

Dose: 119 mg (0.0 ml. 80mg/2ml ampule) q8h IV [calculated on basis of 

1.7 mg/l<g) plus consider giving 5 mg q24h Intrathecal 
Comments: Monitor serur;i concentrations 

In Order to cover for Item <4>: 
Give: PENICILLIN 

Dose: 3 5 million units (7 0 mi) q^»n iv [calculated on basis of 50000 
untts/kgj 
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Infectious Disease Consuiution Session 



understood, you will be prompted by the starxjard questtorimg method 
(enter for normal promptir^g. ' for questions that are not applicable ) 

Please enter the results of positive cultures usir>g the following table 



site 



5)"D0NE 



culture 
number 



date 

collected 



dale) 
positive 



mathodi 
of collection 
(urine.spulum only) 



(The next quesbon asks for several items in tabular form 
s/nce they are found together in the hosptta! record } 

Please enter the results of pending cultures in the following table. 
Site culture date stain) 

number collected examined 



rT>ethod of| 
collection 
[urine.sputum only) 



6)" CSF 1234 30-Jan-77 YES ' 

stain of 
smear 



morphj 



{MYCIN follows up on the stain of 
the smear and the morphology.} 



[type DONE if no organism was seen on the smear) 
7)"00NE 



(No information about stain or morphology is available. MYCIN now 
follows up questiorj 6, asking about other positive cultures.} 



site 



cul # 



date coll. 



8)"00NE 



Please enter negative cultures in the following table. 
Site culture date} 

number collected 



smear coll. method! 

examined '?j 

(There are no more positive cultures.} 



method of| 
collection 
[urine.sputum 
onlyl 



9)-D0NE 

10} Do you suspect Pt538 may have an infection at a site from which you 

have not obtained culture specimens'? 
"NO 

Please enter information on current aniimicrobia's 

datg route of dale) 

name administration started 

11) " CEPHALOTHIN IV 23vJan-77 

12) "D0NE 

Please enter information on prior antimicobials 

datg route of datej 

name administration started 

13) "D0NE 

[Considenng organisms (other than those isolated from cullure;^) which might 
be present. . .] 

14) Has Pt53d recently had symptoms of persistent headache or other 
abnormal neurologic symptoms (dizziness, lethargy, etc,)'' 

YfiS 

15) Has Pt538 recently had objective evidence of abnormal neurologic signs 
(nuchal rigidity, coma, seizures, etc ) documented by physician 
observation or examination'' 

" YES 



(There are no negative cultures.} 



datel 
stopped 



The CSF cultures will be considered to be associated with MENINGITIS 
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Appendix: Annouted Typescript of a Sample MYCIN Consulution 

RECOMMENDATlON-2 \s equivalent to RECOMMENDATlON-1 

WoukJ you hke to see details of this companson'> 
Y^S 

Looking at the coverage of the most hkely" ttems, we see that" 

RECOMMENDATlON-1 consists of 1 first choice drug (AMPIClLLIN lor ITEM-l 
and ITEM^) ar>d 1 third choice drug (GENTAMICIN for ITEM-1. ITEM-2 and 
ITEM-3) 

RECOMMENDATION-2 consists of 1 first chofce drug (PENICILLIN for ITEM.4) 
and 1 third choice drug (GENTAMICIN for ITEM.2. ITEM-1 and ITEM-3) 

ORGANISMS RECOMMENDATlON-1 REC0MMENDATION.2 

'most likely" Drug - Choice Ranking Drug Choice Ranking 

ITEM-1 AMPICILLIN-AniD-GcNTAMICIN-l5t GENTAMICIN-3rd 

ITEM-2 GENTAMlC^N-2rKl GENTAMlClN-2nd 

ITEM-3 GENTAMlC(N--3rd eENTAMIC!W-3rd 

ITEM-4 AMPICILLIN-Ist PENlClLLlN-lst 

(The desirability of a drug is defined to be its lowest ranking for the items 
It covers ) 

Do you wish to see the next choice therapy? 



NO 
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DISCUSSICW: CX»MENTS ON EXPERT SYSTEMS AND THEIR USE 

Allen Newell 



Bruce Buchanan gave us a broad view of e55)ert systems and showed a 
rather large collection of aspects across the vAiole field that need to 
be worried about to make the advances NASA needs- This leads to a 
point I \^7ant to make, vdiich concerns my cwn concern about vAiether 
research is really needed on some parts of ej^jert systems. 

As preparation, Figure 1 shews my current favorite diagram to 
explain AI. You need to xmderstand about AI that there are two 
dimensions in terms of vdiich to talk about the performance of systems. 
The first is the amount of immediate knwledge that they have stored 
\jp, that they can get access to. This can conveniently be measured by 
the ramiber of rules. The second is the amount of knowledge that they 
obtairi hy ';35)loring the problem. This can conveniently be measured by 
the nua)biir of situations examined before committing to a response. 
Thus, there are isctoars of equal performance, with better p^ormance 
iiKareasing up tcwards the northeast. Yoc. can rou^ily locate different 
intelliger± systems in this space. Esqpert systems are well \ip on the 
immadiate-kncwledge scale, without much seaixh. The Hitech chess 
program, which has a little, but not very much knowledge, lies far out 
on the search dimension. The htman being is substantially above the 
e>q5ert systems on the knowledge dimension. Also, most e^^jert systems 
do less search than humans do. The vAiole point of this diagram is 
that, in the current era, e^^^ert systems are an attempt to e^qolore \*iat 
can be achieved without very much search and i^asoning, but with a 
modest amount of immediately available knowledge. 

If you accept the characterization of expert systems in the figure, 
then even without all the research that Bruce was talking about, there 
exists an interesting class of programs, even thou^ it is very limited 
in capability. The e>qpert systems of today constitute a class of 
programs that appears to be very useful if you limit the tasks to the 
ric^t kinds. Bruce was helping to characterize that. We actually know 
a modest amount about this type of task. If you have the ric^t 
knowledge assembled, then you knew what to do and how to do it without 
very much involved reasoniijg. For such tasks and tlieir expert systems, 
it is not clear that the big need is to do a lot more research. The 
big issue is to build lots of these systems for lots of ther^ tasks. 
VJhat is needed is more like a development effort, to find cut which 
tasks can successfully be done with modest amcants of e^^^ertise. The 
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SEARCH KNOWLEDGE Situations/tasks 
FIGURE 1 Dranediate kn^^^ledge versus searxdi knowledge trade-off 



need is not to build any more e>5)ert-system shells, or to build more 
tools* The need is to pour all of the effort into finding out, in the 
plethora of space-station tasks, vAiich are the ones that the current 
level of technology really does provide interesting and useful 
solutions* 

Tom Mitchell talked much itore specifically than did Bruce about the 
fact that the space station is a jdiysical system— -that if you want to 
use expert systems and AI systems, they had better interact directly 
with physical devices* I agree absolutely that this is a major issue 
and a very important one for NASA to research. In particular, bringing 
control theory and symbolic reasoning together so we understand those 
as a single field is iiiportant* What I would like to emphasize is how 
little WB know about that. In some respects we do not even know the 
units to use to talk about it, or hew suc±i symbolic program^> ought to 
interact with control systems. 
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To bring this point ham, let ine note that a lot of current effort 
in vmdersrtranding the human inotor system is directed toward exploring a 
kind of system \*iich is not controlled in detail. A particular (^riamic 
system that has the ri^t prc5)erties is conposed, and is sent off to do 
a motor action. A good ejcanple is Hollerbach's model of handwriting, 
in the ^diole sfystem is conposed of siitply-interacting dynamic 

subsystems, vdiicdi continuously draw letter-like curves, \^cih are then 
modulated for specific letters. These ceramic systems are not cast in 
concrete. Ihey are created and torn down in seconds, in order to 
ccarpose and reccxipose dynamically according to short-term task 
requirements. Ihe motor lanits that the cognitive system interacts with 
are these cocposed dynamic systems. We know almost nothing about such 
systems. When we finally understand something about it, I suspect it 
will diange our mtion entirely of the interface beta ^ the symbolic 
system and the dynamic system. Ihe point is that there is a lot of 
research before we even get a dear idea clear about how symbolic 
systems ou^t to interact with mechanical and dynamic systems. 

Tcm made a suggestion about emulating devices. If a device breaks, 
then the emulation can be pliagged in. I think this is an intriguing 
idea and there may be a xsnole world of interesting research in it. You 
mi^t counterargue that, if this is possible, then everything mi^t as 
well be run in coaputer mode. But there is a real reason not to do 
that. ^ Mciking the emulation work may take a lot of cortputing power. A 
principal reason for xising real physical devices and not simulating 
everything is that your system runs faster if yoi ^o not simulate it. 
But that does not iiiply that, if one device breaks, you cannot bring to 
bear an overv^ielming amount of conputational capacity to try to 
corrpensate for it. 1h\Jis, the system is prepared to emulate everyvdaere, 
but only has to do it in one or two places on any occasion. Emulation 
provides a backcp capability. In fact, it is never likely to be as 
good, but at least it will be better than having to shut down the vniole 
system. I think this is an ir& cresting path of research, vMch could 
be pursued a long way. In particular, the feature tnat Tern mentioned 
about thinking of ways to construct systems so that they are 
deccaiposable and eraulatable mi^t yield many interesting possibilities. 

Tom also raised the issue of sharing responsibility. However, he 
did not in fact tell xis much about how tasks should be shared. Rather 
he described a particular aspect of the is«3ue, vMch suggests that the 
machine oa^t to learn .fma the himan, ancJ tnen, quite properly, that 
the hman ou^t to learn from the machine. I approve of both of these 
activitL^, bit they beg the vihole question of sharing. Ihey do not 
elaborate ways of sharing, but both spend a fair amount of their time 
sinply learning to be like each other, axxi confusing Who really has the 
knowledge and vAio really knows how to do v*iat. lo fact, if one has 
machines with this kind of capability, the entire question of vdiat it 
means to share may get transformed. It will hocca-^ extremely difficult 
to quanti^ or be precise about who knows vtot, vAio ou^t to do vtot, 
and even vAio is doing vtot in the space station. Ihere exists a kind 
of coaiplementarity, in vMch the more you spread capabilities around in 
the system, so that there is a lot of redundancy, the less possible 
will it be to characterize the role of system ocatponents 
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effectively — ^to say for instance vihat the separate contributions are to 
the productivity of the total station. All I want to c±>serve is that 
such systans are not clean, and learning and performance get confused. 
However, even thou^ they are not clean, they itay turn out to be the 
kind of system one has to build in order to get the margins of safety 
that are needed in space. 

Finally, I vrant to talk about the issue of rctoustness, althcu^ it 
was not a major focus of either speaker. It is a fact, I believe, that 
there has been essentially no work on making e55)ert systems robust. 
Ihere is mucfe 'iittention, of course, to their givii^ e>qplanations. But 
fundamer^ally e)5)ert systems are collections of rules, vMch are 
tiltimatf J brittle and unforgiving. The lack of attention to 
rdbustne s arises, in pa2±, because there is a market for programs that 
are not very flexible or very robust. They can nevertheless, be 
successful. Ihey will be increasingly successful, especially if the 
problem is turned around by saying 'I've got this hammer; viiere are 
interesting things to hit with it?' As a result, the e>qpert systons 
field is not focused on solving the problem that I think NASA has to 
get solved, vMch is that it cannot lase e>5)ert systems in space iLiless 
we understand how to build robust esqpert systems. 

A research program in robust e)5)ert systems could be fielded by 
NASA, and I would certainly recommend it. Given requirements on 
robustness, one could es^lore more redundant rule sets or the provision 
of greater backtracking and reasoning mechanisms. Oliere are many 
approaches to robustness and reliabilil^ that have their analog in 
e35)ert systems and could provide guidance. 

However, I think something more basic is at stalce. What is really 
wrong here is the viiole notion of laying dcwn code — or rules, vdiich 
play the role of code for existing e^^jert systems. That is, as soon as 
you lay down code, it becomes an echo from the past, lanadapted to the 
future. You have became subject to a mechanism. Code is blind 
mp'^hanism, coirplex perhaps, but blind. Ihe iitportant thing about a 
blind mechanism is that it does not care. A bullet does not care v*io 
it kills. A broken beam does not care on vdiom it falls. The horror 
stories about non-robust software almost invariably reflect the fact 
that code was laid down in the past, in a fantasy land of vfliat was 
going to be, and something different ha.ppened at run time, for vdiich 
the code was not adapted. 

The problem, I believe, is that the unit, the line of code, is 
wrong. A clue for what mi^t be ri^t comes from the database world, 
with its adoption of transaction processing. It was concluded that the 
wrong thing to do was to tate a line of code to be the unit. What had 
to be done was to package the specification of behavior in a hardened 
form called the transaction, for vdiicih some guarantees could be made. 
This has the ri^t flavor of having changed the natuire of the unit to 
make real progress. It has the wrong flavor because the imit is still 
just a little mechanism. Somehow, in the area of robustness, the 
smallest unit of action has got to be, if I can use a metaphor, a 
caring piece of action. It has to be an action, vdiicih has a big enough 
context, even in its smallest \mit, to react in terms of the global 
goals of the system, so it can care about safety and can care about the 
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consequences of what it is doing. Somehcw we have tc find out how to 
create units that have that property, Ihe units cannot be rules or 
code and so forth, viiich are just inedhanisms. I think NASA ou^t to go 
after that. It would be a great research project. It is iry 
contribution to this syirposium of a really basic research goa? that has 
an exceedingly small chance of succeeding, but an ijnmense payrf f if it 
does. 
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SYNOPSIS OF GENERAL AUDIENCE DISCUSSION 



Concems of several varieties were esqpressed about the knowledge 
engineering aspects of e>5)ert systems. Meatibers of the ai:K?ience with 
direct e55>erience with developing e)5)ert systems gave these remarks 
special cogency. E^qpert systems seem to work better vfliere good 
extensive fonmilations of the knowledge base already exist. Attertpting 
to develop that knowledge base as part of the e55)ert system effort 
often fails. Ihe domains of expert systems are often exceedingly 
narrow, limited even to the particularity of the individual case. 
Given the dependence of the knowledge in e>ipert systems xxpon the 
informants, there exists a real danger of poor systems if the human 
experts are full of erroneous and iirperfect knowledge. There is no 
easy way to root out such bad kncwledge. 

On this last point it was noted that the learning apprentice systems 
discussed in 14itchell's paper provide some protection. The human 
e>55erts give advice for the systems to construct ejqplanations of the 
prior ej^jerience, and v^t the systems learn permanently is only what 
these e>5)lanations si:$)port. Thus the esq^lanations operate as a filter 
on incorrect or inconplete knowledge from the human e55)erts. 

Concern was e>5)ressed about v*ien one could put trust in e)^)srt 
systems and \*at was irequired to validate them. This was seen as a 
major issue, especially as the communication from the system mcfved 
towards a clipped "Yes sir, will do" . It was pointed out that the 
issue has exactly the same canoplexity with him^ans and with machines, in 
terms of the need to accumulate broad-bar^ e^qperience witli the system 
or human on vdiich to finally build vsp a sense of trust. 

Trust and validation are related to rcibustness in the sense used in 
Newell 's discussion. It was pointed out that one path is to endow such 
machines with reasoning for validation at the mcsnent of decision or 
aciuion, \Aien the context is available. This at least provides the ri^it 
type of guarantee, namely that the system will consider some relevant 
issues before it acts. To make such an approach work requires 
providing additional global context to the machines, so the information 
is available on vtoich to make appropriate checks. 

Finally, there was a discussion to clarify the immediate-knowledge 
vs search diagram that Newell used to describe the natm^ of expert 
systems. One can move aloi^ an isobar, trading off less 
immediate-knowledge for more search (moving down and to the ri^t) or, 
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vice-versa, more iinraediate-knowledge for less search (moving up and to 
the left) . Or one can inove toward systems of increased power (moving 
xsp across the isobars) by purtipirjg in sufficient additional knowledge 
and/or search in some caabL ation. Hie actual shape of the 
equal-perfonnance isobars depends on the task domain being covered. 
Ihey can behave like hyperbolic asyirptotes, \Aiere further tradeoff is 
always possible at the cost of more and more knowledge (say) to reduce 
search by less and less. But task domains can also be absolutely 
fin.ite, such that systems with rero search are possible, with all 
correct response siirply known. For these, there comes a point ,jhen all 
relevant knowledge is available, and no further addition of knowledge 
iixxceases performance. 
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SESSIOT III 

lANGUAGE AND DISPLAYS PCJR HUMAN-OCMEUIER OCmUNICATION 



157 



C3ffiNGE IN HUMANHDCmJTER INTERFACES ON IHE SPACE STATION: 
WHY IT NEEDS TO HAPPEN AND HCW TO PLAN FOR IT 



Philip J. Hayes 



OVERVIEW 

The space station is xmique in the history of maiuied space fli^t in 
its planned longevity. Never before have we had to deal with a riianned 
space system that was e^qpected to perform for twenty five years or 
longer. The iirplications of this requirement are far-reaching. This 
pager attenpts to e>5)lore sc3me of these irtplications in tiie area of 
hxjman-conpiter interfaces. 

Ihe nt.^ for hooking (designing software for future extension and 
modification) is alreacfy well established"^ in the space station 
program as a vAiole. Ihe paper e^^jlores in some detail v^y hooking is 
an iitportant requirement for hiiman-cnrputer interfaces on the space 
station. The reasons are centered around the rapid rate of e5^>ansion 
in the^Jcinds and combinations of modalities (typing, graphics, 
pointing, speech, etc.) available for humaii-cortpiter interaction and in 
the interaction and irrplementation techniques available for them. Many 
of these modalities and associated interaction techniques are 
well-developed, others are in embryonic stages. Different modalities 
(or combinations of modalities) are appropriate to different 
situations. The paper therefore also looks at the appropriateness of 
the modalities accordir>g to task, user, and the space station 
environment. An appropriate matching of interface modalities, task, 
and laser is essential to maximizing the potential of on-board computer 
systems in their primary goal of si^porting and aitplifying human 
abilities. 

A second rationale for providing hooking in human-coirpiter 
interfaces is related to the currently developing possibilities for 
intelligent interfaces. So the paper discusses methods of achieving 
intelligence in interfaces, and in vtot circumstances it is desirable. 
T!ie issue of intelligence is also related to the distinction between 
conversational/agent type systems axxi machine/tool-like systems. The 
current culture at MASA is hi^ily oriented towards the latter. The 
paper e35)lores the tradeoffs between the two approaches and discusses 
the circumstances in vMch a more conversational/agent style system 
could fit space station goals ax)d NASA culture. 

After examining the need for hooking in human-conpiter interfaces, 
the paper turns to the question of how to achieve it. The discussion 
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here centers around methods of achieving a clean separation bet^r^n the 
interface and the underlying application (space station system) it 
interfaces to. Ihe key advantage of this kind of separation is that it 
allows the interfaces to be changed independently of the application*- 
so that a new interface (possibly eirplcying different TOdalities frr , 
'the old one) can be rolled in without altering the application in any 
way. In an environment such as the space station \diere the underlying 
applications may be conplicated, mission critical, and hi^y 
jjitegrated with other applications, such separation becomes all the 
more iirportant. 

Ihe feasibility of a conpletely clean separation between interface 
and application is unclear at the mcfraent. Ihe question is currently 
being addressed by the major siibarea of hxman-Kxatpiter interaction that 
deals with user interface management systems (UIMSs) . ifiifortunately, 
it is infeasible to wait for research on this topic to reach full 
maturity. Itoless the original applications and interfaces are built 
with separation in mind, retrofitting separation is likely to be 
inpossible. ^ So the paper discusses ^t kind of interface/application 
separation is feasible for the space station initial operating 
capability (IOC) , and looks at how this will constrain the overall 
possibilities for human-conpiter interaction. 

Separation of interface from application has two other important 
advantages i\i addition to hooking. First, it prartK±es consistency 
between interfaces to different applications. Most of the work on 
UIMSs enjiiasizes a cornnpon set of tools for construction of the 
s^>arated interfaces, and this inevitably leads to considerable 
consistency of (at least fine-grained) interface behavior between 
interfaces. Ohe iirportance of consistency in interfaces has been 
appropriately ertphasized by Poison in the preceding paper. Secondly, 
the hooking made possible throu^ separation also makes it easier to 
alter interfaces during their initial development. The only effective 
way of developing excellent human-conpiter interfaces is to build 
interfaces, see how users perform, and then repeatedly alter them to 
deal with problems, "mis process is much more effective if the 
interfaces are easy to modify. The paper e^q^lores these two other 
aspects of interface/application separation further. 



APPROPRIATE IMIERFACE MODMITIES 

Uie need for change in himen-canputer interfaces on the space station 
and the conseqaent need for hooldng arises out of the rapid development 
that has occurred and continues to ocair in interface modalities 
(typing, graphics, pointing, speech, etc.) and the interaction 
techniques used with them. This section discusses v*iat interface 
ncdalities (or combinations of modalities) and techniques are 
appropriate for different kinds of interface tasks. An appropriate 
matchiiig of interface modalities, task, and user is essential to 
maximizing the potential of on-board coomputer systems in their primaiy 
goal of si:5pporting and amplifying human abilities. 
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Interface Requirements for the Space Station 

Ihe basic considerations in designing good human-coiipiter interfaces 
for the space station are the same as for any human-coirpiter interface 
on Earth. In particular, the interfaces should be: 

- easy to learn 

- easy to use 

- efficient to lase 

Much has been vnritten, e.g. (Hansen, 1971) , about this and similar 
lists of attributes. For present purposes, we can treat them as 
self-evident, thou^ of different relative iitportance in different 
interface situations. There are, hcMever, some special characteristics 
of the space station environment that require further discussion before 
looking at the relative utility of the different available interface 
modalities. Ihese characteristics include: 

0 Wei^tlessness: In addition to being the most c±vious special 
characteristic of the space station environtnent, zero-g causes 
specific problems for bmKUi-asnputer interfaces » The problem is 
that movement by humans in a wei^tless environment induces 
other movement. Has is particularly true if the movement 
involves pressure against anotlier object, such as in typing or 
pointing on a touch sensitive screen, but it is also true for 
any kind of gesture, such as with a non-tcuch li^t pen. A 
person enploying such interface modalities will tend to drift 
away from or change orientation with respect to the workstation 
ha is using. The siirplest solution to involuntary movement 
induced by human-corrpiter interaction is siitply to tether the 
user physically to the workstation. This, however, has the 
c±Jvious disadvantage of inconvenience, especially if the 
interdCrt:ion session will not last long. Also, the tethering 
would have to be relatively coirplex and therefore intrusive to 
solve coitpletely the problem of dianging orientation. 

o Analogue/continuous interaction: Many interactions on the space 
station require (or could benefit from) command input vdiich can 
be given rapidly and/or in an analogue/continuous manner. 
Obvious exairples iiK:lude ary kind of docking or remote 
manipulation activity. Less c±vious ones include manipulation 
of continuous variables in, for ir-^ance, systems controlling 
the life-si^jport environment. Analogue/continuous interactions 
require different kirds of interaction modalities and techniques 
from those used in more traditional cortputer command languages. 

o Varied groc^^s of users: Althou^ the most mission-critical 
systems will continue to be operated by hi^y trainea 
personnel, the sheer number of systems likely to be available in 
the space station suggests that this will not be true for all 
systems. Some less mission-critical or time-critical systems 
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in, for instance, the areas of personal cmfort, provisioning, 
or inter-crew corninunication, are likely to have to interact with 
users of varying degrees of sophistication and e^q^erience with 
respect to those systems. To avoid negative transfer effects 
between different systems, interfaces need to be as consistent 
as possible across the various systems* To deal with users viio 
are ine55)erienced (for that system) , interfaces also need to be 
as self-evident, self-explanatory, and self-documenting as 
possible. !lhe goal should be for ejq^erience with some subset of 
the non-mission critical systems and appropriate knowledge of 
the domain the system deals with to serve as sufficient 
ejqperience for the acconplishment of strai^tforward tasks with 
any of the other non-mission critical systems. 

• Hands-free operation: There are many situations in the space 
station environment in which hands-free interaction would be 
useful* An c±ivious exairple is ejrtxa-vehicular activity, but 
more frequent examples mi^t arise v*ien it was irtportant to 
avoid the induced motion problems mentioned above (in the 
wei^tlessness bullet) or \^en it was useful to have an 
additional I/O channel in the conte)ct of a cortplex hands-on 
analogue activity such as remote manipulation. The most natural 
hands-free modality is speech, but other possibilities include 
control throu^ eye-movement, or in specialized circumstances 
use of feet or other body parts. 

Having looked at some of the space factors vMch mi^t influence 
choice of interface style and modality, we now look at the 
appropriateness and range of applicability of the various ncdalities. 
Some of the discussion presi^jposes certain styles of interface for each 
iype of modality. The presuppositions are not always necessarily 
valid, but are characteristic of the way the modalities have typically 
been lased. 



Character-oriented Interfaces 

The vast majority of human-coirputer interfaces currently in use are 
character-oriented. The users of these interfaces provide iiput by 
typing on a keyboard, and the systems provide oui^t thrw^ a screen 
with a fixed number of character positions (typically 24 lines of 80 
characters) . Interfaces of this kind do not have a great deal to 
commend them for the space station environment. Reasons include: 

• The physical pushing motion involved of typing leads to the 
induced motion problem mentioned above. Typing sessions of ary 
lerigth require some kind of tethering arrangement. 

© Typed input is unsuitable for analogue/continuous interaction. 

^ In character-oriented interaction, the user typically issues 
commands throu^ egressions in a line-oriented artificial 
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cxsnmard language) . Such languages generally require significant 
learning effort, making them difficult to use for initial or 
ca<?iiq1 users. Scopae command languages, such as the one for DEC'S 
qperating system, have shewn that it is possible throu<^ 
uniformity ard carefully thou(^t out help facilities, to reduce 
the difficulty of use by non-expert users. Kov;ever, command 
line interaction is iriiereritly itore limited in its perspicuity 
than the direct manipulation style described in the section 
titled "Grcqphically-Oriented Interaction". 

• Althou^ soKte of the leamability and ease of use prx±>lems witii 
ccanmand-line interaction can be overccstve throuc^ selcaction from 
menus from the keyboard, this can be seen as an attertpt to 
overcoffte the lii»J.tations of the mcxJality by use of an 
Intieraction t:echnique borrowed from anotiaer modaility, i.e. 
pointing iiput. It seems more apprqpriatie to use the pointing 
mcxaality d^^rectay. 

• Charactzer-oriented interaction is essentially an old, tiiou(^ 
very well worked out (see e.g. Martin, 1973), technology. 



Graphically-Qrient:ed Interaction 

A recently developed and increasingly popular style of interaction is 
based on the use of a hi^-resolution graphical display and a pointing 
device such as a mouse or joystick. A well kncjwn system exenplifying 
this scheme is the Macintosh personal cosKpiter (Williams, 1984) . 
Xntreraction in this style is based on techniques such as^ 
iaenu--selection, icon selection and movement, and other kinds of 
graphically-oriented <:?x?rations. Ihis style of interaction is also 
known as direct manipulation (Hutchins et al., 1986; Shneidennan, 
1981) , indicating ideally that the user should feel that he is directly 
manipulating the objects represented by the canoputier syst^^m. An 
exanple of this kind of direct manipulation analogy is delt=:ting a file 
by using a mouse to "pick tp" the icon representing the file and move 
it into an icon depicting a wastepaper basket. 

Ihere are maiy int:erfaces that are graphical in natxire, but fall 
well short of the ideal of direct manipulation of providing the user 
with the illusion of qperating directly on the "world" of the 
underlying application. Interfaces that rely on menus, for instance, 
often do not support such an illusion. Int:eraction will have more of 
the flavor of direct manipulation if the user can perform an operation 
by moving an icon, for instxince, as in the file deletion exairple above, 
t±an bi selecting the name of the operation from a list in a menu. To 
the extent that they can be maintained, the metaphors iitplicit in 
direct manipulation interfaces make the int:erfaces more easily 
leamable, and reduce the need for help systems. This is important for 
the varied groups of users that will be using non-mission-critical 
systems. The )ferox Star (Smith et al., 1982) and Macintosh (Williams, 
1984) have givai some idea of vdiat is possible in this line in the 
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office and personal cxstpiting arena. More research is needed to 
provide more interaction metaphors on vMch to build direct 
manipulation interfaces. The creation of such metaphors will be 
aidedby the existence of new and innovative I/O devices (see section 
titled "Novel I/O Modalities") . 

Graphically-oriented or direct manipulation interfaces are in many 
ways si^jerior to character-oriented interfaces for the space station 
environment, but there ore still some deficiencies, in particular, 
scane of the standard pointing devices used on earth are not well 
adapted to a wei^tless environment. This is particularly true of the 
mouse vdiicii is intended to be vised on a flat surface under the 
influence of gravity. Ihe lightpen and the tracker ball both require 
pressure against a surface and so have an induced motion prti)lem. The 
joystick may be better adapted from the point of view of induced motion 
since it requires that the user grip it to manipulate it. Ihis raises 
the possibility that correction of the motion induced mj,^t be possible 
throu^ the user's grip. However, there are obvious problems with this 
approach for fine-grained movements, but there is a gr^t deal of 
e3?)erience with the use of joysticks in wei^Uess environment frcm 
such tasks as remote manipulation. 

A better approach may be solved by further development of innovative 
pointing devices specifically aimed at \ise in a wei^tless 
Qwironment. One possibility is a freely movable hand-held "mouse" 
vaiich induces 2-D motion on a screen. Of course, the full six degrees 
of freedom of motion with such a device also open i;cp the possibility of 
control of three-dimensional simulations or real actions. Devices of 
this kind are available and investigations into their use and 
refinement should be encouraged. 

Another innovative kind of pointing technology even better adapted 
for space is eye tracking. Eye tracking has the dual advantages of no 
significant induced motion and hands-free operation, it has the 
disadvantage of intrusive apparatus, it may be particularly 
appropriate for activity in a space s-.^it where the eye-tracking 
apparatus can be incorporated into the heLnet with no increment in 
disccsnfort or inconvenience. Further work is needed both to develop 
less intrusive forms of eye tracking and on the use of eye tracking 
control in extra-vehicular activity. 

Earth-based direct manipulation interfaces generally operate within 
the context of fixed workstations. While there are many space stat^'on 
tasks for which this is perfectly appropriate, there are others where a 
more portable arrangement is required or preferable. FVA is the most 
common, but other exanples include iir/entory, inspection, and 
communication tasks. Wbrk on in-helmet displays is needed for EVA to 
complement the work on eye-tracking, other work on hand-held or 
otherwise portable display and pointing devices is needed for the 
on-board tasks requiring mobile interactive devices. 
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Natural Language Interaction Via Kei^x^ard 

Typed natural lar^uage input and output is not a HKxaality in its own 
ri^t, but a variation on character-oriented interaction. However, it 
is sufficiently different trxm typical canmand language interaction 
that it is worth considering separately. 

A low-level, hat nevertheless significant, artifact of the 
redundancy of human lar^uage is that natural language will usually 
require many nore keystrolces than a conmand language designed for a 
specific interaction task. This means that the remarks above about the 
undesirability of the significant amounts of typing involved in command 
lai^uage interaction apply with greater strength to typed natural 
lai^uage interaction. Also for rapid interaction or interaction with 
an e)5)ert user, the amcfunt of typing involved tipically makes natural 
language interfaces unacc^rtably slew. 

Natural language interaction, however, has the irrportant advantage 
over oanmand language interaction that it allows the loser to express 
things in a way that is natural for him, rather than having to learn an 
artificial (and frequently arcane) ccannand language. It is thus more 
suitable for casual users ani could help to meet the goal of making a 
wide variety of space station systemc accessible to many different 
lasers of varying skill levels. 

Ihis argiment in favor ot natural language interaction presi^^poses 
that the interfaces can hardle any form of e)^ression that a user oxrxis 
to com up witli and is :?alevant to the underlying application. At the 
current state-of-the-ea±, this is an invalid assumption. In practice, 
nat?aral language interfaces fall well short of full coverage on 
syntactic, semantic^ and pragmatic grounds, even for the restricted 
dcanain of discourse implied by a specific utterly ing applicatiai. Ihis 
leads to the habitabiliti' problem (Watt, 1968) in vAiich many of the 
advantages of naturalnass and lack of learning disappear because diG 
user has to learn vAiat is still essentially a subset of English (or 
whatever natural language is beirg used) artificially restric^'^ed by the 
limitations of the natural language processing system. This problem 
can scanetimes even make the language more difficult to learn than a 
siii$)le ccBODmoand language because the limitations are less easy for the 
viser to identify ard remember. On the other hand, these proolems Ccin 
be minimized by appropri^t*^ human engineering for interfaces to 
appropriately limited ipplications. However, this is very 
tims--consumirKj and expensive at the time the interface is developed 
since it involves detailed dbsiervzAlons of many userr interacting with 
thQ system and repeated extensions of the natural language coverage 
until all the ocanmonly occurring syntax, semantics, and pragmatics are 
handled. 

Eterhaps the most ijifXDrtant reason for not usirg natural language^ 
interaction is that most interaction can be handled more easily by 
direct manipulation or other graphically-oriented means. Moreover, as 
the section titled •'Graphically-Oriented Interaction" points out, 
graphical interaction is likely to be more suitable for the space 
station environment than character-oriented interaction in general. 
Whenr/ver rhe vser is trying to select between a limited number of 
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altematives or is tryiiig to manipulate objects or access information 
that can be presented to him in an intuitive spatially-distributed 
manner, then natural language interaction (or any other fom of 
tei^oard interaction) is likely to prove inferior to graphical 
interaction. Ihere are, however, some circumstances in vdiich natural 
language or ccanmand language interaction is preferable to graphical 
interaction, including: 

• When there is a large range of options to choose between, 
especially ^en the options can be coitposed in a catibinatorially 
e}5)losive kind of way; 

• When there is no convenient way to distribute the information in 
a two-dimensional space; 

• When a suitable spatial distribution exists, but the resulting 
space of information is so large that only a snail fraction of 
it can be presented to the user at any one time; 

• When the user is looking for information that is distributed 
across several spatially-distinct items, so that retrieval of 
the information by direct manipulation would require iterative 
examination of each of the relevant interface components. 

These conditions are not true for most interactive situations, but 
come \jp frequently enou^ for natural language to be considered as a 
secondary mode of interaction for many applications to si^jplement a 
largely direct manipulation interface. To be effective in this role 
the natural language interaction has to be suitably integrated with the 
direct manipulation interaction. Some work has been done in this ->rea 
on how to use visual context to help interpret pronouns and other ^ 
anaphoric and deictic references by the user and also to allow 
intermixing of pointing and natural language input (Bolt, 1980; Hayes 
1987a) . However, integrated natural language and graphical interfaces 
could provide significant benefits given an appropriate researxii 
effort. 



Speech Interaccion 

Althou^ a combination of typed natural language and graphical 
interaction .jffers some attractive adva..tages, natural language 
interaction throu^ speech offers many more, while the habitability 
problems mentioned in the section titled "Natural Language Interaction 
Via Keyboard" remain, spoken input is much more rapid and natural than 
typing the same words. Moreover, the voice and ears offer channels of 
communication quite separate fror the hands and eyes. Speech input 
leaves the hands free and speech output leaves the eyes free for otiier 
tasks (either computer interaction or interaction with the physical 
world) . ^ 

In terms of suitability for speech interaction, the space station 
eivironmeni- has one specific advantage and one specific disadvantage. 
The advantage is the absence of any need for speaker-independent speech 
recognition. At the present state-of-the-art in speech processing 
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considerably better results can be obtained if the speech recognition 
system has been trained in advance on the specific characteristics of a 
speaker's voice (throu^ recordings of the speaker saying a^ 
predetermined set of word« several tirre^* * . Given the relatively small 
number of people that will be on-board the space station at any given 
time, their relatively long training period, and their relatively long 
stay, such system training is unlikely to be a problem* The specific 
disadvantage of the space station environment is the relatively hi^ 
level of ambient noise that can be expected inside it, at least if the 
e25)erience of the Shuttle is a guide Ambient noise is problematic 
for speech recognition* At the current state-of-the-art, resolving 
this problem would probably require the use of a close-speaking 
micrqphone of some kind* This itself has the disadvantage of being 
intrusive and iiKsonvenient to take off and put back on* 

The current state-of-the-art in speech processii^ is still ^ fairly 
limted. In addition to the speake3r-dependent and ambient noise 
limitations inentioned above, the better ccratnercially available systems 
tend to be able to handle only small vocabularies (less than a thousand 
vrortte is laical) and pauses between each word or groiip of words that 
the system recognizes as a lexical xanits (so-called connected speech 
recognition, as opposed to continuous speech recognition in which no 
pauses are needed) . However, this is a field vAiere rapid advances are 
occurring and new commercial developments plus a very active academic 
research program are pushing back all of these limitations. In fact, 
speaker-independent, large (10,000 word plus) vocabulary, continuous 
speech recognition in noisy environments is likely to be available 
within the lifetime of the space station, and systems in vMch a subset 
of these restrictions have been relaxed are likely in the early part of 
the space station's lifetime. 

Given these prospects for advancement and the inherent advantages of 
speech interaction, it seems natural for NASA both to plan on a 
significant role for voice in space station human-co/tputer interfaces 
and to keep track of or actively si^jport research on speech 
prxx^ssing. Nevertheless, even if the underlying speech technology 
advarices as projected above, other problems remain that will require 
solution before speech can make its full contribution to human-conputer 
interaction on the space station. 

First, spsech interaction on its cwn is quite unsuitable for some 
kinds of interaction, particularly analogue/continuous commands—it 
would be very difficult to control a remote manipulation device thixu^ 
a series of "left a bit", "down a bit" kinds of cammands. Moreover, 
even in situations \Aiere speech could be used, such as the 
specification of discrete commands in an inventory tracking system, it 
may not always be the preferred mode of interaction. ^ For instance, if 
the arguments to a particular coirmand all have relatively ccorplex 
verbal descriptions, but there are only four of them, it is prxibably 
sinpler, more mnemonic, and more reliable to let the user Input the 
argument by pointii^ at a menu or set of icons representir^ them. Both 
of these situations indicate the need for tecihniques for integrating 
speech interaction with other modalities incl\:iding pointing and 3-D 
manipulation. Speech can then be seen as a conplementaiy channel for 
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issuing discrete ccanmands during oontinucus/analogue manipulations 
vjhile both hands are oca:?)ied, sudi as releasing catches during a 
rennote manipulation task. It can also be seen as a si?plementary 
c3iannel for issuing vAiatever commands or portion of ccsnmands ate 
convenient during a discrete ccsnmand interaction, and as a stand-alone 
interaction maiium for discrete ccarnnanas vftienever hands-free operation 
IS necessary or convenient. Ifeny of the same research issues arise in 
integrating speech with other luodalities as tvere described in the 
section titled "Natural Language Interaction Via Keyboard" for the 
integration of typed natural language and graphical interaction. These 
issues include resolution of deictic phrases ("this one", "that") and 
other pronouns, u£<5 of the user's visual context in interpreting vAiat 
he says, and methods of ccsribining ir^jut from pointing and speech to 
form a single ccaaraiand. Althou^ interesting ejsplorations have already 
been undertaken in this area (Bolt, 1980; Hayes, 1986) , these issues 
all require further research. 

In addition to prcblems of integration vdth other ii^ modalities, 
^peech interaction raises scane interestii^ problems of its own related 
to managing the dialogue between human and ccraputer. The first prcblem 
concerns vdien the ccsiputer should listen, i.e. \to it should try to 
mt^ret the speech that its users are producing. Ihe users will 
speak to other people (or soraetimea to themselves) as well as to the 
machine and attempts fcy the machine to interpret speech not directed 
at It IS only likely to cause trouble. Itechniques that have been 
ejqjlored here include physical switdies (typically foot switches on 
Earth) or switches based on key phrases (such as "listen to me" and 
"stqp listening") that have to be uttered to start and step the machine 
trying to interpret speech. These devices are clumsy and detract frm 
the feeling of naturalness that spoken interaction should provide, but 
will probably bs necessary until speech systems become sqphistic?ted 
enou^ to make positive determinations that spoken input is not being 
directed at them. The prospect of such an ability is well beyond the 
horizon of current research. 

Another dialogue issue wich special implications for speech is that 
of ensuring reliable oammunication. An interactive speech interface 
muse ensure that it understands the user accurately; that the user is 
confident of this; that the user becomes aware v^en the system has 
failed to understand correctly; and that the user is able to correct 
such errors v«ien they arise. Itanans have developed sophisticated 
miventions (Sacks et al., 1974; Schegloff et al., 1977) for ensuring 
that communication is indeed robust in this way. Unfortunately, many 
of those conventions rely on a level of understanding and intelligence 
that IS unrealistic for machines. However, to have smooth 
conversations, ways must be fo>jnd to perform the above functions that 
are both suitable for the limited intelligence of current machines and 
fit reasonably well with human conventions. A limited amo-int of work 
has been done in this area e.g., (Hayes and Reddy, 1983) , but much more 
IS needed. 

Finally, there is the same problem of habitability that arises -f-br 
typed natural language interfaces. For speech, however, the problem 
can be even worse since the user is less well able to be delii^erate and 
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precise in his choice of words and phrasings \Aiile speaking than vMle 
typing. Moreover, viien speech is iised as a stand-alone huitan--cc3irputer 
interaction modality, there is no possibility of reminding the user 
throu^^ a display about the limitations of the domain of discoiarse or 
the phrasings that can be used. Work is needed here to find better 
vays of develc^ing a reasonably habitable subset of a natural language 
for a restricted domain, to develop ways for the system to encourage 
the xiser to stay within the bounds of the restricted language throuc^ 
ajprqpriate output of its cfwn, to devise methods for partial 
understanding ^en a user strays outside the bounds of the restricted 
language, and to develcp interaction methods for steering the user back 
on track vdien he does stray as he inevitably will. 



Novel I/O Modalities 

Ohe interaction modalities discussed so far are conventional in the 
sense that they have already been widely used (this is least true of 
speech) in earthbound interfaces and other space systems. However, the 
numerous challenges posed for human-conoputer int action by the space 
station and the recent emergence of some novel and innovative 
interaction ioodalities suggest that it is worthvAiile also to consider 
same of these less-developed modalities for use in the sp?ce station. 

An innovative itput modality of potentially considerable utility on 
the spacp. station is the use of gesture. The conventional use of a 
mouse or other pointing device in conjunction with a display screen is 
a limited form of gesture, but it is possible to sense and interpret a 
much broader range of human gesture by machijie. Large scale gestures 
involving \Aiole limbs are not practical for the space station because 
of the constraints of a weic^tless environment, but smaller-scale 
gestures are quite suitable. The least problematic form of gesture 
from the point of view of the induced motion problem is eye motion. As 
already discussed in the section titled "GrajMcally-Oriented 
Interaction", eye tracking can be used as a substitute for pointing via 
a mouse or other conventional pointing device. It is particularly well 
suited for use with in-helmet displays. 

A more radical departure from conventional technology is the 
interpretation of hand and finger gestures. Technology is energing 
that will allow a machine to recognize a full range of small manual 
gestaares made in restricted spatial context. There is a large range of 
gestures that have associated conventional meanings (such as yes, no, 
get rid of it, move it from place to place, etc.) . Ohis suggests that 
interfaces that accepted such gestures as input could be very easy and 
intuitive to learn and natural to lose. It mi(^t even be possible to 
resolve any motion problems induced by gesturing through the xose of 
balanced symmetrica] gestures vMch er.ploy two equal and c^pposite 
motions . 

We have discussed two ways in vMch gesture can be losed ir: 
innovative ways for canputer irpit. There may well be others. In 
general, there is a need for imaginative exploration of the '/diole range 
of ways in vMch human movement cotpatible with a weightlesfs, noisy 
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environment can most easily be sensed by machine. 

Another potentially promising area for innovation in interaction 
techniques involves aatpot by means other than fixed screens and simple 
audio feedback, m-helmet displays hold significant promise in this 
dir^on. Althoi#i such displays are most natural in circumstances in 
vMch the user has to wear a helmet anyway, such as EVA, they can also 
iinprovB human-conpiter interaction in other circumstances. Current 
investigations. Including some at NASA-Ames, have shown the \itility of 
m-helmet displays for presenting a complex 3-D world view to the 
"^L. ^.^f^ involves the use of direct-eye projection, rather than 
an actual display screen inside the heljnet. It provides the illusion 
of a 3-D world by sensing the direction in vMch the user's head is 
pointing and adjusting the projection accordingly. Uhis is a good 
©ranple of the kind of innovative work in novel interaction modalities 
that needs to be undertaken to eiqjloit fully the potential for 
human-cxaipiter interaction on the space station. 

Other kinds of novel out^ modalities on vhich. further research 
could bring useful results include force or tactile feedback on 
Dpystick-type direct manipulation or analogue tasks and acceptably 
unctotrusive speech out^wt. Force and tactile feedbad. has been used 
regiaarly in flying and remote manipulation tasks, but has been little 
e>5)lored for use in human-ccraputer interaction for more abstract tasks 
su^as manipulating a set of ccaipiter files. Force or tactile 
feedback throu^ a joystick on such problems could enhance the 
diratness of the "feel" of direct manipulation interfaces and also be 
usefcl as an indicator of urgency, ii^ rtance, or difficulty. Speech 

Sf'^'^iS ^ recurring difficult^ is getting 

the ^eech output to fit naturally into the flow of an interaction 
Sp^ oix^ IS by its nature transitory and must be given at just the 
right point in the interaction and be repeatable by th« user if 
desired. Moreover, the speech output should not occur so frequently 
that It becomes distracting to the user. Just as in the casewith 
2Tpjt modalities, much work is needed in the form of imaginative 
^lorations over a large range of untried and speculative output 
modalities. ^ 

^ Finally in this section, we turn to the idea of expert interfaces 
I.e. internees that require considerable expertise and training to ' 
^ ^^-^ °^ efficient interaction in return. 

Ihe hi^ degree of training that will be undergone by many space 
station personnel provides good opportunity for use of innovative 
^spert interfaces, involving coordinated use of multiple limbs, eyes. 
SS; r^S^^® modalities for hi^ efficiency interaction. Flying is 

of such an activity, and many of the techniques 
atvelqped with flying have been successfully tra^isferred to docking and 
other such maneuvers in space. Another source of ideas for expert 
interfaces can come from musical performance (Buxton, 1986) . Savers 
of such instnr^ants as the organ learn after a long period of traininq 
MnJfi^ 5°^ l3Jttos in a coordinated fashion to produce an enormously 
hi^ rate of command input to the instruuvsnt. For interaction tasks 
that are important enou^ to justify the large training periods 
involved and could benefit from a high data transfer rateT interfaces 
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vMch €?rav; on the e^^^erience of flying and ittasical interfaces are well 
VTorth investigation. 

INTELLIGENT INTERFACE? 

The need to plan for change in interfaces comes not only from the 
possibility for advances in interface modalities and the techniques 
vised with them, but also from the increasing possibility of the 
development of intelligent interfaces, intelligent interfaces are 
still a research area, rather than a set of proven interface 
techniques, but the potential benefits of truly intelligent interfaces 
in tenns of ease of use make them an area worthy of investigation for 
future space station interfaces. Intelligent interfaces also fit very 
well with the increasirg development of intelligent, autonomous 
application systems for space use. If an application e^diibits 
intelligent task behavior, then it should also behave intelligently in 
its interaction with its xiser. 

An initial fundamental distinction ' j be m?.de in considering the 
potential of intelligent interfaces is +"he distinction between 
conversational or agent-like systems and tool or machine-like systems. 
Almost all current interfaces are of the tool/machine-like kind. Users 
of such systems accorrplish a task by controlling a (hopefully) 
responsive, but essentially xmintelligent system. Direct itanipulation 
interfaces (see section titled "Graphically-Oriented Interaction") are 
the archetype of this kind of interface since they encourage the user 
to feel that he is directly controlling the world that the underlying 
system deals with. However, coraraand language interfaces can also be 
thou^t of as tool/machine-like since they respond in predictable ways 
to a fixed set of commands. The user is left feeling firmly in 
control. 

Conversatxonal/agent interfaces, on the orher hand, are intended to 
give the user an entirely different feeling. Users of 
conversational/agent systems are intended to feel that they are 
negotiating with a subservient, but intelligent, system. They 
accorrplish their tasks through negotiation with aM throu^ the agency 
of the system,, rather than throu^ direct actions of their own. 
Conversational systems thus have much greater possibilities for 
intelligent interaction than machine-like systems. Conversational 
systems also do not fit well with the direct manipulation or command 
language styles of interface, but fit much better with natural language 
or speech interfaces vMch naturally lend themselves to a dialogue 
style. Interfaces to ijitelligent, autonomoios application systems can 
also make good use of a conversational style of interaction. 

The user of a converse.tional equiptmt reservation system might, for 
instance, request (in natural language) the reservation of a certain 
piece of equipment and then be engaged by the system in a dialogue 
concerning the period of the reservation axxi if the equipment was 
lanavailable the possibility of substitute equipment or substitute 
times. The user of a tool/machine- jl j:b int:erface to the same 
underlying functionality would, on tlie other hand, e^^pect to be forced 
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to specify the reservation times through constraints on the interaction 
enforced b^' the interface. If eqioipment was unavailable at the desired 
time, he would also ejqject to have to initiate a search himself thrtju^ 
alternative times and substitute equipsncnt. It is clear that the 
culture within NASA is very much oriented to tool/madiine-lite 
interfaces and moreover to interfaces in vMch the degree of control 
exercised by the user is very hi^. There are historical reasons for 
this related to the importance placed from early on in the space 
program (loftus, 1986) on having as much human control as possible 
available so that there would be the luaxiraum chance of fixing any 
prcblems that arose. As ^tems Increase in catplexity, the 
tool/inachine-like interfaces havti tended to reduce the amount of 
conplexity (and therefore fine control) available to the user without, 
however, crossing over the line that s^arates tools from agents. At 
the current state of the art, this approach is entirely as it should 
be. -niere are no successful operational interfaces ai^^ere that could 
fairly be described as true conversational/agent systems^ However, 
the promise of intelligent conversational systems remains. If this 
promise is successfully realized, then it offers an attractive way of 
achieving the goal of having a large variety of non-mission-critical 
space station system easily available to a broad class of us<5rs. 
_ Ohe to the development of conversational/agent interfaces lies 
in the deve3.cpnent of detailed xnodels of the task and the user. Tto 
produce intelligent agent behavior, it is necessary to use Artificial 
Intelligence techniques to model vdoat tasks the laser can accoirplish 
throu^ the interface, how he can achieve his goals, and vtot his 
current goals and state of knowledge are. Previous work that has tried 
to do this includes (Huff and Lesser, 1982; Mark, 1981; Card et al.. 
1983) . 

Ihis detailed level of modelling is necessary for intelligent 
agent-like behavior because, without it, the interface can only respond 
to the user's individual actions and the very local context. Using our 
equipment reservation exanple, knowledge of what purpose the user mi^t 
be trying to achieve throu^ use of a particular piece of equipment 
could allow the system to suggest a suitable alternative. Withoirt; that 
knowledge, the system can only respond on the availabiliiy of a 
particular piece of equipment. 

Ihis kind of modelling becomes much harder vdien the user is pursuing 
a goal tl.st involves several syst^ actions. An agent syster?. then has 
to determine the nature of the higher level goal from observation of 
the individual actions. An electronic mail system, for instance, might 
observe that the user is trying to write a message out to a file and 
then jse the contents of the file as tiie body of a message to another 
system user. If it recognized from this that the user was siirply 
trying to forward the message to the other user, it could suggest aii 
abbreviated method of doing so. since individual system actions can 
often fit into many plans and since system users often interleave plans 
to achieve £;5veral goals, the detection of such larger scale goals out 
of lower xeve], actions is a very hard task. A system that has such an 
ability can, however, assist the user in a variety of ways including 
suggesting simpler ways of doing things (as in the example above) , 
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v/aming about pitfalls that it can foresee could lead to the user's 
current plan not achieving his overall goal, offering to take over and 
cortplete the plan it believes the user to be following, or offering to 
perform the next action or actions in the plan vAienever it becomes 
clear \Aiat they are. 

Die kinds of task and user modelling abilities mentioned above could 
be used :ln conjianction with any kind of interface, not just one that 
uses natural language. However, agent-like interfaces fit particularly 
well with natural language for two reasons. FiiBt, natural language is 
a natural medium for the kinds of negotiation that arise vAien a system 
is trying to respond to the goals it believes its \:iser to have rather 
than direct caramands. Second, the goal and task models themselves can 
be very useful in natural language and speech understanding. The 
biggest single prcblem in natural language processing is handling 
ambiguity of various kinds (syntactic, semantic, referential, etc.) and 
if one version of the ambiguity makes sense in the context of the other 
i:iser model and the other does not, then the one that does not fit can 
be eliminated. 

©le whole area of conversational modelling is still in its infancy. 
Much worK remedns to be done to produce visable systems. Hov/ever, 
progress in this field is necessary for truly intelligent interfaces, 
vAiether or not they are based on natural language. Given the potential, 
benefits of intelligent interfaces to the space station, it is an area 
of research well worth pursuing. 

Hie same kind of techniques that go into pure conversational systems 
can also be used in conjunction with more conventional interaction 
ted^ques to produce a h^^rid kind of interface that incorporates both 
conversational/agent and tool/machine-like ccnponents. Ihe basic 
flavor of such an interface is essentially tool/machine-lilce. The 
conversational conponent serves as mediimi throu^ T/diich the system and 
laser can exchange ccorawsnts about is going on in the central 
tool/machine-like coitponent. The user can also use the conversational 
conponent to instruct the system indirectly to perform actions or 
present information that he could perform or request directly (thou<^ 
perhaps more tediously) throu^ the tool/irachine-like component. 

A system of this kind lias several advantages. First, pure 
conversational systems are lansuitable for any task that can be 
performed effectively throu^ direct manipulation techniques, and 
particularly for tasks that involve continuous/analogue interaction. 
Adding a conversational/agent component to a tool/machine-like direct 
manipulation interface for perfonning such tasks allows the basic task 
to be performed in the most efficient manner, but also allows 
conponents of that task that could benefit from a conversational 
approach to do so. Exanples of conversational interaction in such a 
situation inclxade: the user requesting information that would require 
multiple actionL to retrieve throu^ the direct manipulation interface; 
the user asking questions about hav to use the direct manipulation 
interface conponent; the system volunteering information about nore 
efficient ways to use the direct manipulation component; the user 
requestir^ the system to achieve a hi^ier level goal that would require 
excensive interaction with the direct manipulation ccmponent. 
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A secxind advantage ot thit. kind of hi*)rid system is that the 
conversational ccorponent does have to be used at all if the user 
doeff not so desire, ihis kind of arrangement may be the best vray to 
introduce conversational systens into a culture like NASA's that has 
good reason to be cautious about such systems. The unproven nature of 
com'ersational/agent systems suggests that they be introduced in a vray 
that gives their i;iser alternative methods of acconplishing all their 
tcisks. 

Ihis kind of Tn^^rid agent/machine-like interface requires the same 
tec'rmological vinderpinnings as pure conversational systems and hence 
the same research program. Hcwever, it also requires additional work 
on hot.' to integrate the two ccsiponents in a smooth way. Some x-rork 
(Negronponte, 1981. Bolt, 1980; Hayes, 1987b) has already been done in 
this area, but much more is required. 



PIANNING FOR CHANGE IN INTERFACES 

Tbs previous two sections have discussed some of the potential 
develqaments in interface modalities and techniques that will generate 
the need for diange in human-coirpater interfaces during the life of the 
space station, in this section, we turn to the issue of how to deal 
with such change. 



Jser Interface Management Systems 

The essence of the approach discussed here is based on hooking, i.e. 
designing software for future extension and modification. The kind of 
hooking envisaged is determined by the assumption that it is 
unnecessary and probably infeasible to rewrite the underlying 
application systems vfoenever interfaces change. This means that the 
application systems need to be hooked in such a way that new interface 
systems can be developed for them without changes to the applications 
themselves. _ Th:.s in turn means that applications and interfaces must 
be written in as separate a way as possible with caramun-ication between 
them as narrow and as ti^tly defined as possible. 

There is alreacty a substantial body of work in the human-conputer 
interaction literature on this kind of separation between application 
and interface, e.g. (Tanner and Buxton, 1983; Hayes and 3zekely, 1983; 
Hayes et al., 1985; Wasserman and Sliewmake, 1984; Jacob, 1984; Yunten 
and Hartson, 1984) . The systems developed to achieve this kind of 
separation are known as \aser interface management systems (UIMSs) . 
However, wrk to date is far from achieving a consensus on the best way 
to achieve the desired separation or indeed the degree of separation 
that is desirable, appropriate, or possible. This is unfortunate from 
the point of view of building the software for the space station IOC, 
since achieve any useful degree of separation both interface and 
application must be built using a strict model of the kinds of 
corarauiucation that can occur between application and interface. 
Decisions made now on this kind of communication will affect tiie 
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possibilities for interface/application separation fpr the life of the 
space station. Since research work in this area is far from reaching a 
conclxision about \Aiat is the best inodel of conununication, ivhatever 
model is adopted now is likely to be considerably less than optiital. 
However, adqptir^ same model may be better than none at all, so the 
remainder of this section reviews current research and future 
directions in the area of UDC work, 

Ihe basic model adopted by most work on user interface manage^^ient 
systems is shown in Figure 1. The user communicates with the UIMS 
viiich in turn communicates with the applicat'on. Communication between 
the UIMS and the application is achieved through a carefully defined 
protocol vMch limits the kind of interaction that can occur. A 
typical repertoire of communication events mi^t include: 

• renuest frcm the UIMS to the application to perform a particular 

operation with a certain set of parameters 
e notification by the application of coitpletion of an operation 

9 i^xiate by the application of a \^iable irdicating progress 
towards corrpletion of an operation 

e» error xriessage from the application 

m request from the UIMS for a check on the semantic validity of a 
proposed parameter for an application operation 

o reply from the application to such a request 
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FIGURE 1 Model of communication in a UIMS 
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Ihe precise cx)nt:en^, of the messages that flow between UIMS and 
application is defined by a declarative data base, the Application 
Specification Data Base of Figure 1, \Aiich specifies v4iat actions and 
operations the ajplication is capable of* 

This laodel is not the one adopted by the icost usual ai;)proach to 
interface standardization, that of providing a set of standard 
subroutines for hi^-level interface actions, such as getting the user 
to chose a val\ie f rem a fixed set by presenting him with a pop-ip 
menu* A typical interface subroutine for this task itii^t take a set of 
choices as a parameter and return one of the choices. Ihe subroutine 
would take care of the details of presenting the user with "^-he laenu and 
interpreting hi^ mouse movements in making a choice frm it. A 
disciplined use of a coirprehensive package of such subroutines can thus 
provide a significant degree of low-level consistency across 
applications that use it. Htowever, it cannot provide some of the other 
advantages of the kind of separation between interface and application 
described above, as we shall see. 

The kind of separation between application and interface shown in 
Figure 1 can allow the interface to diange without any alteration to 
the underlying application, vfcether or not the interface is provided by 
a mm. A UIMS goes further by defining the behavior of the interface 
itself throu^ another declarative data base (possibly integrated with 
the application specification data base) . This interface specification 
data base governs the details of the way the user is able to issue 
ccamnands to the application. It would govern, for instance, viiether 
cornrtiands were selected from menus, from an ^rray of icons, throu^ a 
coinnand laiiguage line, etc., or \Aiether a particular parameter to a 
specific caramand would be selected fruu a menu, from a raw of "radio 
buttons", or i^'ped into a field on a form, etc.. The UIMS provides a 
basic set of facilities to perform these various kinds of interaction, 
and the interface developer chooses the desired kind of interaction out 
of this cooWxok by an appropriate interface specification. This 
arrangement has several advantages: 

# Consistency: Since interfaces for different applications use the 
sajne basic set of UIMS-provided facilities, the interfaces will 
be consistent at the level of interaction detcdls (how menus 
work, how icons are selected, etc.) . Careful design of the ums 
interface specification formalism can cdso lead to consistency 
at a hi^er level. Consistency of this kind is very inportant 
in the space station, particularly for those less 
mission-critical interfaces where not all xisers may l:>e fully 
e:qpert. The transfer effects made possible thrrai^ consistent 
interface behavior will greatly facilitate interaction with 
unfamiliar interfaces. Moreover, consistency avoids the 
negative transfer effects that can iirpair operation of even 
familiar interfaces. 

9 Ease of interface developmei?t: Specifying an interface thraugh 
the interface specification formalism of a UIMS should be 
significantly less effort than programniing one from scratch. 
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Uie UIMS formalism should provide hi^-level abstractions that 
allow the interface developer to specify the int^ace in terms 
that relate to the functionality of the interface as perceived 
by the xiser, rather than having to program it in a conventional 
manner at a level of detail more closely related to the 
inplementation of the interface. iMs remains true even if the 
conventional iitplementation uses a hi^-level subroutine package 
of interface operations using a subroutine package still 
places the enphasis on inplementation, rather than abstract 
interface operations, 

9 Easier convergence on good interfaces: Despite all the advances 
in hijman-comrpiter interaction that have occurred and continue to 
occur, the only known way to produce an excellent interface that 
fully meets 'Jhe needs of its users is to build (or realistically 
siinulate) the interface, let users in'jeract with it, and modify 
it to resolve the problems that are observed. It is genercilly 
necessary to go around this loop mair^ times before the interface 
performs satisfactorily, so anything that makes the loop easier 
and cheaper to follow is likely to iitprove the quality of the 
resulting interface by cdlowing more iterations, llie UIMS model 
can speed \jp the modification part of the loop since interface 
modification can be done throu^ modification of the declarative 
interface specification, rather than reprogramming in a 
conventional sense. Ihis leadL to a speed \jp in the loop as a 
whole. 

o Ease of involvement of hvman factors e>q)erts: Since the UIMS 
model does not requiire programming to specify interface 
behavior, the interface specification can be done directly by 
pecple v*io are specicdists in human-conpoter interaction, rather 
than ty programmers. Ihis allows better division of labor 
during interface/application- development. Also, since 
programmers often think in terms of iirplementation ease and 
efficiency, rather than thinking about the interface from the 
user's point of view, better initial interfaces are likely to 
result if they are produced mainly by human factors specialists. 

Of this set of advantages, only the first, consistency, and that at 
a relatively low level, is shared by the alternative approach of using 
a set of standardized interface subroutines. The other advantages all 
rely on a level of separation between interface and application that 
the subroutine approad-i does not provide. 

Given this significant set of advantages for the UIMS approach, the 
natural question is \^diy are eill interfaces not produced throu^ UIMSs. 
Hie answer is that current UIMS systemL approach the ideal described 
above only iirperfectly. There are several specific problems. 

Ihe primary problem is that the constraints iirposed by the need for 
an interface specification make it hard to provide ways of specifying 
interfaces that are carefully tailored to the needs of an individual 
application. Solutions to this problem (Szekeley, 1987) have teryded to 
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ititt\Dduce a procsedural ccnponent into the interface specification 
for m alis m , The ability to program interaction allows the interface 
bu ild e r to tailor interfacse behavior to individual interface needs. 
Bie problem with this solution is that it tends to negate the benefits 
of the UIMS approach, such as consistency and ease of interface 
modification, that depend on the interface being specified 
declaratively« Uie way around this difficulty may be to include a 
procedural ccBiponent in the interface specif icatu.on formalism, but 
organize it at as hi^ a level of abstraction as possible from the 
interface point of view. Ihe procedural coirponent could then be seen 
as a hi^ily specialized programroing language for interface 
specificatu.on. Such a language could conceivably maintain consistzency 
b^ encouraging throu^ its available constructs a particular style of 
interac::i':3n. Ease of use for rapid interface developnent and use by 
hxman-<xmputer interaction specialists would be promoted by the 
hi^-level of the abstractions involved. A great deal more research 
would be needed to bring this idea to fruition, but the potential 
payoff could be great. 

A second problem with current UIMS work is that the model of 
OOTiraunicatu.on between application and interface is toc> limitzed. Many 
UIMS models allow only a subset of the list of message types listied 
above as flowing over the UIMS/applicatu.on link. And even that list is 
insufficient for a sizable portion of applications, especially those 
involving graphical or analogue manipulatu.on, vAiich need a much closer 
coi:5>ling with their interfaces than that list of canmunication €\^ents 
allows. Agciin, the solutions that have been e5?)lored (Szekeley, 1987; 
Myers and Buxton, 1986) t:end to change the model in the direction of 
tailoring the UIMS/aj^>lication link to the needs of particular 
applications throu^ use of a specialized prograiraring language - a move 
away from the cleanest form of the UIMS model. A conpramise here may 
be to develop several general UIMS/application communication protocols 
for large classes of applications with similar needs, vfeLle still 
leaving open the possibility of specialized communication protocols for 
particular applicatu.ons. 

A final prc±>lem with current UIMS work concerns the potential 
discussed earlier for interfaces enploying multiple interaction 
modalities in effective coordination. The coordination of the 
different modalities increases the challenge for the UIMS model, and 
the use of a UIMS approach with multiple modalities has not been 
ejqplored. 

Work is needed to overcome all these problems if the UIMS approach 
is to be practical for the space station. Unfortunately, if the UIMS 
approach is to be used at all, a UIMS/application communication model 
must be adapted before the underlying applications are developed. 
Since meeting the needs of complex applications through a UIMS model is 
still a research problem with no clear solution, the only practical way 
a UIMS approach can be adopted for the .space station IOC is to choose 
ti^t (probably quit:e large) subset of simpler space station 
applications that can be adequately serviced by currently 
well-developed UIMS/application communication protocols. Research in 
extending the limits of applicability of these protocols could 
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nevertheless be toseful for new systems developed after IOC* If these 
prac±ical difficulties of adopting a UHS approach appear too 
formidable for roc, the fall-bacdc position would disciplined use of 
a ccfftprehensive package of interface subroutines* Ihis fall-back 
approach would provide the najor advantage of a significant level of 
consistency across applications. 



Interface Deve3.opnent Environments for Rapid Prototyping 

A tqpic hi^y related to tlie UIMS approach to interfaces is that of 
interface develcpnent environments. Since the only kncwn way to 
generate e^ccellent interfaces is throu^ an iterative process of 
creation, testijxjr with lasers, snd modification, a rapid prototyping 
facility for interfaces can materially iitprove ths quality' of 
interfaces produced by making it easier and faster to go around this 
loop. The rapid prototyping facilities most useful from this point of 
view allw interfaces to be seen and interacted with as they are 
developed, rather than forcirg the interface developer to create the 
interface ^dirou^ working in a prograraning language or other formalism 
distinct from the interfac^i itself. Exairples of this approach include 
(Gould and Finzer, 1984; Myers aid Buxton, 1986) . Tfliey can be thai^t 
of as interface editors analogous to a v*iat-you-see-i<^-^vtot-you-^et 
(Wysiwyg) text editors. Such interface editors are a relatively new 
arrival on the human-ccatputer interaction scene; their utility msam. 
they deserve a great deal more research attention. 

Althou^ rapid prototyping facilities can exist independently of the 
UIMS approach to Interface design, they fit well with it. Ihe 
cleanness of the based separation betv^en application and interface in 
the VIMS mcxJel makes an interface develcpivsnt environment particularly 
useful in conjunction with a VIMS approach. A VIMS interface can be 
developed before the real application is tiVailable (or without 
incurring the eaqjense of running the real application) by creating a 
dummy application tliat operates according to the same UIMS/applic?tion 
protocol as the real application. Coupled with a rapid prototyping 
facility, this capability allows rapid developiivsnt of interface 
iaock-i5)s to provide cheap and fast initial "sanity checks" on 
interfaces as they are developed. 

Another intriguing possibility with Wysiwyg interface dwelqpmsnt 
environments is their use (probably in restricted mode) by end users to 
reconfigure interfaces to their pers^jnal needs or preferences. So long 
as the interface modification facilities are made as easy to operate as 
the interfaces themselves, and so long as they do not interfere with 
the normal operation of the interfaces, this kind of facility could 
serve to iitprove significantly the level of persona.1 satisfaction that 
space station tisers find wit*' their interfaces. 

Work in the area of Wysiwyg interface development facilities has 
been almost entirely concentrated on graphical direct manipulation 
Interfaces. Ihis is natural in that it is the visual aspect of the 
interfaces that is most natural to specif in this manner. Hoj^e^er, 
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additicmal \vork is needed both to develop techniques for this kind of 
interface furtb?^., and to extend the natural interface specification 
techniques to inulti-inode interfaces as v/ell. 



OONCIUSIONS 

Ihis paper has f ccussed on change in space station interfaces - the 
reasons that it inust be expected and ways to plan for it. We have 
identified several topic areas associated with these two aspects of 
change in space station interfaces in \diich further research effort 
would be beneficial. We conclxade by listing several broad areas in 
vMch we particularly recomrnend the si^port of further work. 

• investigation of speech recognition techniques and natural 
language processing techniques for use wi-*'i spoken itput, plus 
the integration of both of these roodalit..^ with direct 
manipulation interfaces; 

• e}q)loration of innovative I/O devices suitable for the space 
station en^/ironment; 

e work cai the user aixl task modelling needed to si^jport 

conversational interfaces and the integration of such interfaces 
with itachine-litoe direct manipulation interfaces; 

• continued development of the UIMS conc^t, coipled with hi^y 
interactive interface development environments for all interface 
modalities. 



NOTES 

1. 'Ihe conplementaiy concept of scarring (designing harxJware for future 
extension and modification) is also well established, but is not 
addressed in this paper. 

2. Diou^ see Iferk (1981), Carbonell, et al., (1983), and Douglass and 
Hegner (1982) , for exanples of successful e^^^erimental agent 
systems. 
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CXXSNinVE FACTORS IN THE DESIC3N AND DEVEIDIMENT 
OF SOFTWARE IN THE SPACE STATION 



Peter G. Poison 



Achievement of the operational and productivity goals for the Space 
Station will require extensive use of a vAde variety of cotputer-based 
systems ranging from application programs that run on general purpose 
work stations to specialized embedded conpiter systems that monitor, 
operate, ar^ trouble shoot critical subsystems, e.g., environmental and 
power control systems (Anderson and Qiambers, 1985; Jcihnson et al., 
1985) . HO'.^er, iitproperly designed loser interfaces for these systems 
will corrprcfmise these goals. 

The objectives of this chapter are to characteri<:e major problems 
involved in the design of himan-coitputer interfaces for systems on the 
Space Station emd show how systematic application of empirical and 
theoretical results and methodologies from cognitive psydiology and 
cognitive science can lead to the development of interfaces that reduce 
training cost and enhance space station crew produjctivity^ This 
chapter focuses on four issues: 1) transfer of i;iser skills, 2) 
ccirpreheasion of corrplex visual displays 3) huiiBn^-conputer problem 
solving, 4) management of the development of usable systems. 



PROBLEMS 
Trai^fer of User Skills 



Inconsistent loser interfaf;es in vMch the same basic function is 
performed by several methods in different contexts reduces tranfiCer aM 
interferes with retention (Poison. 1987; Postman, 1971). The Space 
Station's numerous conputer-based systems and applications progrrji^ 
will be developed by different organizations over a period of m?Jiy 
years. Inconsistency will be the rule rather than the exception unless 
extraordinary measures are taken in the design of user-interfaces for 
these systems. Popular and powerful applications programs developed 
for personal computers could be realistic models for software developed 
for the Space Station. 

The typical popular applications program for a personal conpiter has 
been developed by an independent organi?ation; the program has a great 
deal of functionalitY which is the reason for its commercial success. 
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Qlie user interface is unique to the application being jmbedded in the 
application's code. Effective lose of the application requires 
specialized training and several weeks of e>5)erience. There is no 
consistency acrc^ different popular applications. For exairple, they 
can have very different inethcds for editing operations on a text 
string. Ihus, editing an axis label on a graph, ed:,ting an operating 
system canmand, or inodifying a line of text with an editor all require 
different sequences of user actions. 



The Conpr ^hension of Coirplex Visual Displays 

Cortplex visual displays using graphics, color, and possibly motion will 
be used in the space station to present various kinds of inf onnation to 
crew roenibers carrying out ccoooplex tasks. Poorly fonnatted, pcorly 
organized, and difficult to coii^prehend displays will have negative 
iitpacts on the productivilY* Such displays increase training costs, 
difficullY of coiplex tasks, and probability of serious operator 
errors. 

Ihere exists extensive knowledge of the processes iri>^olved in the 
pero^yfcion of basic visual properties like color and fonn (Graham, 
1965; Walraven, 1985) , emd there are numerous guidelines for display 
layouts and lose of syiribols and color (e.g. Smith and Moser, 1984; 
Kosslyn, 1985) . However, there is no systematic knowledge of how 
poc^le corrprehend coiplex displays or use the information presented in 
such displays to perform cortplex tasks. There are no general 
principles for the development of effective coirplex displays. 



Huinan-<toitputer Problem Solving 

NASA has extremely ambitious plans for the use of artificial 
intell^gence and robotics in the space station. The proposed 
application areas include informcjtion management, life si^jport systems 
operations and monitorir^, electrical power systems operations aiid 
mcmitoring, aiid guidance and navigation. Many of thase tasks on the 
Space StatioTi will be performed by systems with significant embedded 
intelligencfi in order to satisfy mission, technological, and economic 
constraints and to achieve productivity goals (Anderson aM Chambers, 
1985) . 

OSie lose of artificial intelligence tecJiniques can significanU.y 
increase the complexilY of a system from the point of view of its human 
user. The crew member must now understand both the task performed by 
the system as v^ll as tJ^e tfiaracteristics of the "intelligent" control 
program (Hayes, 1987) . Waterman (1986) notes that exp rt systene are 
"brittle" when poshed beyond the very narrx:>w domain of their real 
e55)ertise can fail with little or no war^iing. Uncritical lase of the 
cuiT^nt state-of-the-art in expert systrans' technology could decrease 
productivity of the crew and endanger tiieir safety. Achievement of 
NASA's plans for the applications of artificial intelligpnce in the 
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space station will require extensive basic research and irapid advances 
in the state-of-the-art. 



soiunoNs 

Four solvrtions are proposed for the piXDblems outlined in the preceding 
sections: 1) Use of information processing models of tasks in the 
design process, 2) allocation of adequate resources to user-interface 
jvelcpnent, 3) use of user interface itBnagement systems, 'jond 4) use 
of existing e5q>ertise in KPSk. 



Detailed Information-processing Models 

The first, and most inportant, soD.ution is that designs for 
applications programs, conplex visual displays, and cooperative 
huinan-canpiter prdbiem solving s\'steras be based on detailed, 
information-processing mode3-s of cognitive processes involved in the 
performance of specific tasks. Information-processing models describe 
the knowledge, cognitive operations, and user actions required to 
perform a task. These mod'^ls can also be used to gen^^arate predictions 
of usabililY paraitieters, e.g. training time, productivity, and mental 
work load, and they can be vised to isolate design flaws in proposed 
versions of a conpiter-based system. 

Information-processing models describe wi^at transfers, the knowledge 
necessary to perform the task, and thus they can be used in the design 
of consistent user interfaces that facilitate transfer of xiser skills. 
Information-processing models can make iitportarit contributions to the 
develcpnent of effective conplex visual displays • The models describe 
both the knowledge necessary to successfully conpletp a rask, v^iat is 
to be displayed, and the processes irr/olved in extracting that 
knowledge from displays, how it is to be displayed. 

Information-processing models are an iirportant component in the 
successful developtient of effective human-cortputer problem solving 
systems. There is general agreement that successful human-conputer 
problem solving systems will incorporate models of the task and the 
user (Hayes- 1987). Current theoretical methodologies in cognitive 
psychology and cognitive science can be used to develop both kinds of 
models. 



Management of the Design Process 

The second solution involves successful management of the development 
process for computer-based systems. Ihe typical development process 
for conplex conputer-based systems in the military, NASA, and the 
civilian sector does not allocate enough resources to usability 
consideracionis. xne primary focus of the process is on developing a 
system with specified functionality* Functionality is necessary but 
not sufficient for usability. Usability, training time and 
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prodiictivily, is typically eval\iated late in the design cycle v*ien itis 
far too late to make c^ianges that iitprove usability. The design of 
hi^ily productive cco^plex corrputer-based systems requires solving 
simultaneously two interrelated sets cf de-sign problems involving 
functionalily usability* 

What is proposed in this chapt:er is that usability and functionality 
caTsiderat:ionr receive equal vei^t during all phases of the design 
cycle. The preliminary version of the systiem is evaluat:ed for 
usability* If the system fails to meet usability goals, the design is 
revised. The revised design is then evaluat:ed. This it:erative process 
continues imtil the design meets both usability and functionality goals 
(Gould aixi Lewis^ 1985; Hayes, 1987) . 



User Intierf ace Management Systems 

The third jsolution involves the use of appropriate technologies. Many 
of the prdl:>leni^ involving transfer of user skills and consist:ency 
across applications can be solved using \aser intier^ace management 
systems. Ihe natnare of tliese systems is discussed in Hayes (1987) and 
Hayes, Szekely, and Lemer (1985) . They will not be discussed further 
here. 



E>dst±ig Ei^jertise in NASA 

The fourth solution involves making effective use of the e>5)ertise 
already within NASA. What is beii>g proposed here is similar to other 
modeling efforts currently undeirway in NASA dealing with problems of 
anthropometrics and habit^bility. OPSM (Globus and Jacoby, 1986) is a 
canoputer model that simulat:es crew actions aM interactions carrying 
out specific tasks under constraints imposed by different interior 
canfigurat:iQns, crew^ size and skills and other environmental factors. 
These simaiLatfcd task scenarios exe used t:o rapidly esiplore a large 
number of variables involving the environment and crew composj.tion 
iteratively deveJ.qpini^ a more optimal design, Detailed models of the 
cognit:lve operations aiid physical actions required to carry out various 
typCiS of tasks involving interaction between man and machine can be 
ViseC In a similar fashion t:o optimize designs for user int:erfaces. 



Alternative Solutions 

Guidelines and Handbooks 

HUman factx)rs guidelines (Smith and Mbsier, 1986) ax)d handbools 
summarize information ranging from design goals and itBthodology to 
specific data on perceptual ax)d motor pnx^esses. Guidelines and 
handbooks contain parametric information about basic perceptual and 
motor processes and information on limitations of classes of 
ir/t^eraction techniques. However, they are of limit:ed use in 
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characterizing hi^er-level cognitive processes, e.g. conprehension, 
learning, and problem solving. Guidelines propose reasonable design 
goals for cognitive aspects of a system, but they contain little or no 
advice on how to achieve such goals. Exairples of cognitive guidelines 
include '*miniiaize working memory load" and "minimize the amount of 
Information the user has to meoraorize". 

Usability parameters characterize the vise of a system to perforra a 
task, e.g. training tiine, productivity/ and xaser satisfaction. 
Developing a system that optimizes usability parameters requires 
understanding of the task and the cognitive processes ixv/olved in 
perfontdng the task. Most features incorporated into user interfaces 
are not good or bad per se. Usability is determined by interactions of 
the specific features of a design with the structure of a task. 
Guidelines do not contain necessary information about task structure, 
the knowledge reqioired to perform a task, or the d^ramics of the 
cognit:ive processing required to perform the task. Our knowledge of 
cognit:ive processes is in the form of detailed information processing 
models of the performance of ccarplex tasks. 

Many writers (e.g. Gould and Lewis, 1985; Hayes, 1987) argue that 
successful intzerface design is an iterative process. This view is 
strongly chanpioned in this chapter. It is not possible to deprive an 
qptiraal int:erface from first principles. Accumulated ejiperience, 
information in guidelines and handbooks, and careful theoretical 
analyses can lead t:o the development of a reasonable initial trial 
design. However, this design has to be evaluatzed, modified, and 
evalua1:ed again. In other words, guidelines and handbooks are not 
enou^. 



BTpirically Based Jfodeling Strategies 

Gould and Lewis (1985) and Carroll and Campbell (in press) seriously 
question the theoretically driven design and evaluation processes 
chanpioned in this chapter. Ihey argue that there are serious 
limitations of current modeling techniques, e.g. the limitations on our 
knowledge of conprehension of coarplex visual displays. They chairpion 
eirpirically-based modelling and evaluations methodologies. Many 
successful, coitplex systems, e.g. today's generation of hi^y 
autanated aircraft, evolved from a combination of increasing technical 
capabilit:ies, e.g. hi^y reliable microprocessors, and extensive 
operational e5^)erience (Qiambejrs and Nagel, 1985) . 

However, relying on empirical methods tx> evaluatze trial designs has 
serious limit:ations. They include difficulties in extxapolating 
results, doing e5$>eriments tx> €valuat:e conplex systiems, and evaluating 
transfer of training. For exanple, in a very conplicated systiem, it 
may not be feasible to do enpirical strudies tx> pvaluat:e a large number 
of tasks or tx> evaluate transfer between many tasks. If the current 
version of a trial design has unacceptable usability parameters, a 
designer has the ve^ difficult task of deciding viiat attxibutes of the 
current design should be changed in order to ir.prove performance. A 
theoretical model provides an e^^licit deconposition of the conplex 
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imderlying processes. Hhis acJditional detail describing the underlying 
processes can be very valxiable in making well motivate changes leading 
to the next iteration of the design process. 



OJT. JNE OF REMAINDER OF CHAPTER 

Ihe remainder of this chapter is organized into five sections. The 
first provides a general characterization of the kinds of theo^v^tical 
loodels of cognitive processes that we argue should be the basis *:cr tlie 
design of hi^H/ losable cortputing systems. The next section describes 
a detailed analysis of the process involved in the transfer of ^isar 
skills and presents summaries of enpirical results si^jporting thise 
theoretical analyses, lliis section also provides a description uf 
current theoretical models of human-cxatputer interaction. Transfer is 
a well understood problem. The objective of this long section is to 
provide an illustration of a successful solution. The next section 
describes some of the difficult problems in^/olved in the design of 
effective oonplex visual displays. The foirth section discusses the 
problems involved in the development of effective cooperative 
man-mchine systems. Ihe final section m'dkes recommendations for 
farther research. 



1©DEI5 OF COGNITIVE PROCESSES 

The information processing framework (Newell and Simon, 1972; Gardner, 
1985) provides the basis for the develcpnent of detailed process models 
of tasks performed on the Space Station. These theoretical analyses 
can be used as the basis for the design of human-conpiter interfaces 
that have Lnnimul training costs and for the task and user models 
inoorpcrated into human-<x3rrputer prdblem solving systjems. 



The Information Processing Fraitiework 

An information process.ing model incorporates representzations of the 
task, the knowledge required to perform the task, and the processes 
that (^Derate on the representation to perform the task (Gardner, 
1985) . Such models are often formalized as coirpiter siirtulation 
programs. The framework characterizes the general architecture of the 
human information processing system which in turn constrains the nature 
of the representations and the processes that operate on them, e.g., 
limited Mnediute memory. Newell and Simon (1972) and Anderson (1976, 
1983) have proposed that the human information processing system can be 
described as a production system. The following section describes 
production system models of human'-coarputer interaction. 
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Models of Kuiran Coonoputer Interaction 

Ohe GCMS model (Card et al. , 1983) and Cognitive Complexity Theory 
(OCT) (Kieras and Poison, 1985) both characterize the knowledge 
necessary to mate effective^ routine xase of software tools like an 
operating system, a text editor, or a data-base managet\ The GCMS 
formalism describes the content and structure of the knowledge 
underlying these skills. OCT represents this knowledge as production 
rules vMch permits one to quantify aroount o OCT incorporates all of 
the assuirptions of the GCMS irKDdaX. The production rule fonnalisni 
enables one to derive quantitative predictions of training time, 
transfer of user sidlls, and performance. The next two secti-^ns 
describe each framework. 



The QOMS Model 

Bie GCMS model represents a user's knowledge of how to cany ^:>ut 
routine skills in terms of goals , operations , methods , and seJ .ection 
rules . 

Goals represent a laser's intention to perform a task, a subtask, or 
a single cognitive or a physical operation. Goals are organized into 
structures of interrelated goals that sequence cognitive operations aixi 
user actions. 

Operations characterize elcinentary physical actions (e.g., pressing 
a function key or -typing a string of ciharacters) , and cognitive 
qperations not analyzed by the theory (e.g., perceptual operations, 
retrieving an item from memory, or reading a parameter and storing it 
in working memory) . 

A user's knowledge is organized into methods vMch are subroutines. 
Methods generate sequences of operations that accorrplish specific goals 
or subgoals. The goal structure of a method ciharacterizes its internal 
organization and control structure. 

Selection rules specify the conditions vinder vMch it s appropriate 
to execute a "^thod to effectively accoitplish a specific goal in a 
given context. They are conpiled pieces of problem solving knowledge. 
They function by asserting the goal to execute a given method in the 
appropriate context. 



Content and Structure of a User's Knowledge 

T e GCMS model assumes that execucion of a task involves deconposition 
of the task into a series of stfctasks. A skilled user has effective 
methods for eadi type of subtask. Acccarplishing a task involves 
executing the series of ^specialized methods that perform each subtask. 
There are several kinds of methods. High-level methods decompose the 
initial task into a sequence of subtasks. Intermediate-level methods 
describe the sequence of functions necessary to conplete a subtask. 
iDW-level methods generate the actual sequence of user actions 
necessary to perform a function. 
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A laser's knowledge is a mixture of task-specific infonnation, the 
hi^-level nvethods, amd system-specific knowledge, the lew-level 
methods. The knowledge captured in the GOMS representation describes 
both general knowledge of how the task is to be deconposed as well as 
specific infonnation on hew to execute functions required to coirplete 
the task on a given system. 



Cognitive Conplexily Theory 

Kieras and Poison (1985) propose that the knowledge represented in a 
CXIMS model be formalized as a production system. Selection of 
production systems as a vehicle for formalizing this knowledge was 
theoretically motivated. Newell and Simon (1972) argue that the 
architecture of the human information processing system can be 
characterized as a production system. Since then, production system 
models have been developed for various cognitive processes (problem 
solving: Simon, 1975; Kairat, 1983; text comprehension, Kieras, 1982; 
cognitive skills: Anderson, 1982) . 



An Overview of Production System Ifodels 

A production system represents the knowledge necessary to perform a 
task as a collection of rules . A rule is a condition-action pair of 
the form 

IF (condition) IHEH (action) 

\Aiere the condition and action are both conplex. Ihe condition 
represents a pattern of information in working memory that specifies 
viien a jiiysical action or cognitive operation represented in the action 
should be executed. The c ondition includes a description of an 
e3<plicit pattern of goals and subgoals, the state of the environment, 
(e.g. , prcfnpts and other information on a CRT display) , and other 
needed information in workirg memory. 



Production Rules axti the GCMS Ifodel 

A production system model is derived by first performing a GCMS 
analyses and then writing a program mplementing the methods and 
control structures dos^aribed in the GCMS model. Al-thou^i GCMS models 
are better structural and qualitative description of the knowledge 
necessary to perform tasks, ej^ressing the knowledge and processes in 
the production system formalism permits the derivation of well 
motivated, quantitative predictions for training time, transfer, and 
execution time for various tasks. 

Kieras and Bovair (1986), Poison axxi Kicrus (1985) and Poison et al. 
(1986) among others have successfully tested assuirptions tanderlying 
these predictions. Ihese authors have shown that the amount of time 
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required to learn a task is a linear function of the number of new 
rules that mist be acquired in order to successfully execute the task 
and that escecution time is the sum of the execution times for the niles 
that fire in order to ccsrplete the task. Ihey have shown that transfer 
of training can be characterized in the terms of shared mLes. 



TRANS'JER OF USER SKLUS 

In a follcwing section, research on transfer of user skills in 
human-ccarputer interaction will be reviewed. This research shofr;s that 
it is possible to give a very precise theoretical characterization to 
large transfer effects, reductions in training time on the order of 
three or four to one. These results strongly svqpport the hvpothesis 
that large transfer effects are due to explicit relationships between 
different tasks performed on the same system or related tasks performed 
on different systems. Existing models of the acquisition and transfer 
of cognitive skills enable us to provide precise therretical 
descriptions of these transfer processes, ihesr-. same models can in 
turn be used to design, consistent xjsei interfaces for a wide range of 
tasks and systems that will promote similar large reductions in 
training time and saving in training costs. 



A Theoretical Model of Positive Transfer 

The dcaninant theoretical approach for ejqjlaining sijecific transfer 
effects is due to Thomdike and Woodward (1901) and Thomdike (1914) . 
Ihomdike assumed that transfer between two tasks is mediated by common 
elements. Caramon elements acquired in a first task that successfully 
generalize to a second do not have to be releamed during the 
acquisition of the second task. If a large number amount of the 
knowledge required to successfully perform the second x:ask transferee, 
there can be a dramatic reduction in training time. 

Kieras and Bovair (1986) and Poison and Kieras (1985) proposed that 
a common elements theory of transfer could account for positive 
transfer effects during the acquisition of operating procedures. The 
common elements are -the rules. Tasks can share methods and sequences 
of user actions and cognitive operations, ihese shared con^wnents are 
represented by common rules. It is assumed that these shared rules are 
always incorporated into the representation of a new task at little or 
no cost in training time. Thus, for a new task in the middle of a 
training sequence, the number of new unique rulc^ may be a small 
fraction of the total set of rules necessary to ixecute this task. 



Ejjaitples of Successful Transfer 

Ihis section briefly describes results fron the human-conputer 
interaction literature demonstrating the magnitudes of the transfer 
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effects and showing how OCT (Kieras and Poison, 1985) can explain these 
results. 

Itolson et al, (1986) found very large transfer effects, on the order 
of four to one redact: ons in training tiire, for learning to perform a 
siitple utility task on a inenu-based, stand-alone, word processor. 
Oheir theoretical analysis showed that a significant portion of the 
kn.vledge, vAien quantified in terms of number of rioles, required to 
perform these tasks were in consistent with lew-level methods for 
makiig menu transitions, entering parameters, and the like. 

Siiigley and Anderson (1985) found large transfer effects between 
different text editors, e.g., transfer from a line to a screen editor. 
Poison, Bovair, and Kieras (1987) found effects of similar magnitude 
for transfer betwean two different screen editors. Iheir theoretical 
analysis showed that editors share ccoraton top level method5. that 
deccnpose the task of editing a manuscript into a series of subtasks 
involving ii^vidual charges in the itenuscript. Fi;s2±herT5ore, even very 
different editors share Icw-levpl methods, e.g. . cursor positioning. 
Text editing is a task where transfer is medi ^red by knowledge of the 
general structure of the task as well as sha^^ methods. 

Ohe Xerox STAR is a workstation that was ejqjlicitly dasignecl to 
naximise the transfer of methods both within a given application as 
well as across different applications (Smith et al. 1983). All 
ccanmands have a camnon format* Ihe user first selects an object to be 
manipulated using specialized selection methods for different kinds of 
text or graphic objects. Hie operation is selected by pressing one of 
four ccoranand keys on the kei^ooard. For exauple, hitting the delete key 
causes the selected object to be deleted. 

Ziegler et al. (1986) carried out transfer ejq^eriments with the STAR 
workstation. They studied transfer between text and graphics edico:s. 
They shewed that cconnnon methods acquired in one context were 
successfully transferred to the other lead-^ng to very large transfer 
effects. Further, they were able to provide a quantitative analysis of 
the magnitude of these transfer effects x:ising a production system model 
like those of Poison et c>l. (1987) . 



An Exairple of the Iirpact of Lew Level Inconsistencies 

Karat et al. (1986) examined tratisfer between three hi^y similar word 
processing systems that were intended by their designers to facilitate 
the transfer of user skills from one system to another. The first 
system was developed as a menu-based, stand alone word processor. A 
major goal in the design of the follcw-on ^systems was to facilitate 
transfer from the dedicated, stai^d-alone, word processor word 
processors hosted on a general purpose personal compiter and a 
departmental conputincr ^^^tem. 

Karat et al. eva^ the magnitude of transfer effects from the 
dedicated version oi the system to tiie other two system envirc-iments* 
The transfer effects were disappointingly small. Karat et al. found 
users' difficulties transferring their skill were due almost entirely 
to subtle differences in lew level-msthods. For e^' :iTOle, many proolems 
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were caused by the fact that the dedicated version of the system has 
specialized, labeled function keys. On the general purpose personal 
cx^nputer and the departmental ccoipiter system version*^, the user had to 
learn and retain the locations of the corresponding functions on an 
vinlabeled, generic kei^x>ard. Inconsistencies in assignments for 
activating known functions disrupted performance vtien users atteotpted 
to transfer their skills from one version of the system to another. 



iJtplications for the Design of Systems in the Space Station 

Ihe research reviewed in preceding sections shows that common methods 
ai3e transferred across tasks and application leading to large 
reductions in training time, on the order of 100% to 300%. However, 
the Karat et. al. results shew that these transfer effects are fragile 
and can be ireduced by minor but arbitrary differences in low-level 
methods let alone more ejctensive inconsistencies. For example, the 
method for centering text is identical on both the dedicated and 
personal cpoirputer versions of the systems exceijt that the centering 
function is activated on the dedicated version by Control-Shift C and 
by Control-Shift X on the personal coitputer version. This small 
inconsistency disrupted the performance of skilled lasers of the 
dedicated version forcing them to stop and refer to documentation to 
find the correct function key. This inconsistency was caused ky the 
fact that Control-Shift C already used ky many applications programs to 
abort and jetum to the top level of operating system. 

The potential for serious inconsistencies in common methods across 
different systems and application in the Space Station is much greater 
than the example of the three \jord processing system studied ky Karat 
et. al. They were all developed ky a single manufacturer with the 
e55)licit goal of penritting transfer of skills developed on the 
dedicated version of the system. 



OCMFREHEMSION OF OCMPLEX VISUAL DISPLAYS 

Rapid developments in hardware and software technology permit the 
generation and presentation of very conplex displays combining text, 
color, motion, and coitplex visual representations. There is limited 
in^erstanding of how to effectively utilize these new capabilities. 
There is extensive knowledge of the basic visual processes underlying 
color and form perception (Graham, 1965; Walraven, 1985). Detailed 
models of the conprehension of conplex visual displays do not exist. 
There is some systematic work on the effective graphical presentation 
of quantitative information (e.g., Itosslyn, 1985; Tufte; 1983). The 
widely acclaiined book The Visual Displav of Quantitative Information by 
Tufte is a collection of design guidelines. 

Today, development of effective conplex displays relies almost entirely 
on empirically-based, iterative design methods (Gould and Lewis, 
1985) . ^ A good illustration of how effective these methods can be is 
shown in an experiment reported by Bums et al. (1986). These 
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investigators were concerned with tlie problem of display format 
optimization. Uiey designed a set of alternative displays to be used 
in orbital maneuvering tasks onboard the Space Shuttle. The new 
displays grocped information by function and include more meaningful 
abbreviations and labels. Bums et al. (1986) had both non-e55)erts and 
Space Shuttle crew members retrieve specified items of information from 
the current, operational displays and the reformatted e>5)erimental 
displays. 

Reformatted displays improved both speed and accuracy for the 
non-e55)ert subjects. Ihe char>ges in format had no effects on Space 
Sliuttle crew meniber performance, and. the reformatted displays iirproved 
their accuracy. These results are surprising. Extem>ive training and 
experience should have enable! the crew members to develop specialized 
skills to deal with even non-optimal displays. Any changes in display 
format should have disn:pted these skills leading to reductions in^ 
performance for hi^y trained crew members. One possible concliasion 
is that the current di^lays are so far from optimal that even brief 
experience with the reformatted displays enabled trained crew members 
to perform at a level equal to their performance with actual displays. 

The Bums et al. (1986) e5$)eriii^t shows that application of our 
current knowledge of visual perception and guidelines for formatting 
and labeling can lead to significant iitprovements of performance in an 
eitpirically-based iterative design process. However, the situation in 
the Space Station is more conplex. The display technology for the 
systems onboard the Space Shuttle used small, alpha-numeric CKTs. 
Displays onboard the Space Station will mate extensive iise of graphics 
and color. In other words, increase capabilities provided by new 
display technology will enable developers to generate truly 
inocsiprehensible displays. 

Furthermore, there are inportant transfer and consistency issues. 
Conflicting uses of symbols, color and motion cues, and inconsistent 
formats across applications will have the same inpact on lasers as 
inconsistent methods for entering text, increased training time and 
probabilities of user errors. Deling with issues involving more 
corrplex displays, consistency, and the use of displays as interfaces to 
systems with significant embedded intelligence are more corrplex design 
problems. The design problems will have to be solved using the 
combination of enpirica.l3.y-based evaluation methods combined with 
detailed models of the task and a theory of the conprehension of visual 
displays. 

Consider the design problems involved -^^^ developing the displays for 
systems wit. significant embedded inteZ ^ence lite the Space Station's 
environtnental controls and power systems. Effective displays should be 
based on 1) an understanding of the knowledge required to successfully 
perform critical tasks, e.g., trox±>le shoot a malfunction, 2) a 
characterization of the cognitive processes involved in extracting the 
necessary information from the display, 3) and a description of how 
the information is utilized to corrplete the task. In other words, vAiat 
is required is a conplete theory of the comprehension of conplex visual 
displays. 
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Ellis and his colleagues (Ellis et al., 1985; Kim, Won Soo et al., 
1985) have proposed a methodology for the develcpnent of effective 
specialized displayr, for spatial tasks involving control of objects in 
three dimensional space with a full six degrees of freedom, e.g. the 
JEL Telerobot denonstrator, and Space Station Proximity Operations 
Di^lays. Ellis and his colleagues propose a design methodology that 
creates a very ti^t link between the characteristics of the task, a 
tlieoretical understanding of the perceptual processes, and empirical 
demonstrations that the displays actually facilitate performance of the 
task. This design strategy can be generalized in all various types of 
displays and tasks. 



HUMaN-CXMPUIER ERDBTEM SOLVING 

NASA has a2±iculated a very ambitious design philosophy for ej^jert 
systems to be usee", on the Space station calling for the development of 
cooperative human-conputer problem solving systems. Many issues 
concOTiing the design of such systems can be understood from e^^jerience 
with hi^y axitomated commercial aircraft (Chambers and Nagel, 1985) 
automatic test equipment (Richardson et. al., 1985), and automated ' 
control systems for nuclear power plants. Some of the issues are: 1) 
vigilance of the human operator, 2) safe transition from automatic to 
manual modes of operation, 3) maintenance of skills necessary to 
perform tasks manually, 4) successful conpletion of a task after the 
agnatic system has failed, 5) allocations of functions between man 
and machine, _ 6) and the development of truly symbiotic human-coiputer 
prjblem solving systems. Although the basic issue have been 
Identified, there are no well worked out general solutions nor ai-e 
there sny operational exanples of symbiotic human-conputer problem 
solving systems. 



Autonomous vs. Cooperative Systems 

Hayes (1987) di&, -inguishes between conversational/agent and 
machine/tool-like ^stems. In a conversational /agent system, the user 
interacts with ar. ntelligent agent to acconplish a task. Robots that 
carry out complex . +-asks under human si^jervision and systems with 
sophisticated natural ..^ '^=»ge interfaces are examples. 
Machine/tool-like systems ^ ^ijrectly controlled by their users 
althou^ they can be hic^y c -ed carrying out a \^ole sequence of 
low level steps without direct i^^^ervention. Examples include 
auto-pilots, autoiatic test equipment (ATE) and application programs 
like text editors and spreadsheets. 

Ihere also is a second important dimension, autonomy. Some systems, 
once initialized by their users, carry out their task cortpletely 
autonOTKJUsly or only make use of the human user as a low level sensor 
and manipulator. Qamples include auto-pilots, ATE systems, and most 
ejqjert systems. Auto-pilots and ATE systems are not normally 
considered intelligent. However, they carry out extremely cortplex 
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tasks autoronously. Tliey may not be classified as intelligent system? 
in that they carry out their tasks losing well understood algorithms. 
Maiy e5q5ert systems iitply the human user as a lew-level sensor and 
manipulator, Olie task is carried out autonomously, Ihe user can ask 
for e>5)lanations of the final results or why the system requested a 
given piece of data in the process of cortpleting the task (e.g. , 
Shcrtcliffe, 1976). 



Limitations of Current ESqpert Systems 

Intelligent systems can actually cortplicate the task of human user, 
e.g., telerdbots and ajplications with natural language interfaces. 
Bejczy (1986) shows that intelligent agents can impose additional 
difficulties for users becaxose they have to \mderstand both the control 
program and the task. For example, no natural language interface is 
capable of responding correctly to unrestricted iiput. Such interfaces 
imderstand a limited subset of natural language and may have no or 
limted capabilities for reasoning about the task. Thus, even if the 
user's request is parsed correctly, resulting commands may be an 
incorgplete and/o^ incorrect sequence of operations necessary to 
cortplete the task. 

Consider the problem of effective handof f from automatic to manual 
operation in a troubleshooting task, e.g., finding a serious fault in 
the power distribution system. Current es^jert systems do not make the 
transition feom automatic to manual operation gracefully. Waterman 
(1986) observes that esqpert systems have narrow domains of esq^ertise 
and they have on capability to reason about their limitations. Because 
they can't reason about their limits, such systems are little lose in 
assisting a human problem solver once they have failed to find the 
caxise of a serious fault. Thus, the system can fail catastrqphically 
leavii^ its user with a task of manually diagnosing a serious fault. 

Building a system capable of reasoning about its limits and 
providii>g the loser with a useful explanations regarding fail\:ire is 
beyond the current state-of-the art. However, it's exactly this kind 
of capability that is required in a truly cooperative s^tem. In 
summary, current ea^rt systems are not cooperative problem solving 
systems. In the process of performing their task, humans serve in a 
very low level subservient role and when systems fail, they fail 
catastrophically providirig their users with little or no information 
for the reason of the failure and no assistance in continued efforts to 
solve the problem. 

Being able to reascn about its own limitation is difficult because 
of const3caints embedded in the fundamental properties of current 
knowledge representation schemes (Jackson, 1986) . The rules in current 
esqjert systems contain a conoplex mixture of control knowledge and 
domain specific and general problem solving knowledge. Suciri systems 
have no ej^licit model of domain principles or any specific knawledge 
of their strategies. Exactly this kind of knowledge is required to 
produce coherent explanations (Clcncy, 1983) . This type of knowledge 
is also required to reason about limitations. 
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CJoaperative Human-cxjiiputer Prdblem Solvers 

laSA's goals are far more aitibitious than the develcpnent of autonomous 
intelligent prcblem solvers with eiqjlanation capabilities. It is 
r^jeatedly proposed in various NASA documents to develop cooperative or 
^lotic hUK!an-cc8ip±er prdslem solvers (Johnson et al. 1985; Anderson 
and Oiambers, 1985) . ^^^-=.^11 

Disct_:ssions about the possibility of developing such systems have a 
surprising unifonnity. ihe authors dsserv^e that powerful prtjblem 
solvers can be developed if systems e}?)loit the canplimentary strengths 
f£ !SP ^ machine pennitting one to canpensate for the weaknesses of 
Qie other. The next issue is function allocation. The discussion of 
f^cticai allocation b^ins with a general assessment of the strengths 
and weaknesses of human and oonputers as problem solvers. This 
assessment is in the fom of a characterizations human and machine 
ocanponents listing the strengths and weaknesses of each. Typical 
listings are in Jcdinson et al., 1985, pp. 27-28; Richardson et al., 
1985, pp. 47-49; Anderson and Chambers, 1985. What is scriking about 
th^ lists IS their consistency. The following is taken from 
Richardson et al. (1985, pp. 47-49) . 

The strengths of the human ccarponent of the system ar^: 

1. Processing of sensory data. 

2. Pattern recognition. 

3. Skill<5d physical manipulation but limted physical strength. 

4. Limited metacognitive skills, e.g. ability to reason about 
limits of knowledge and skill. 

5. Slow but powerful general learning mechanisms. 

6. A large, content-addressable permanent memory. 

The weaknesses of the human problem solver are: 

1. Limited working memory. 

2. Limited capacity to integrate a large number of separate facts. 

3. T^ency to perseverate on favorite strategies and malfunctions; 
set effects and functional fixity. 

4. Limited induction capabilities. 

5. lack of consistency; limtations on the ability to effectively 
use ne./ information. ^ 

6. Emotional and motivationa]. problems. 

7. Limtations on the availability of individuals with the 
necessary abilities and skills. 

8. Limited endurance. 

The current generation of expert systems and highly auronomous 
automatic systems, e.g. ATE' s make use of human sensoiy processing, 
pattern-recognition, and manipulative skills. Most authors recocmize 
this and point out that their objective in developing cooperative 
problem solvo^ig systems is to exploit human's cognitive capabilities as 
well as these lower l^el skills. Continuing to quote Richardson, et 
a±., the strength of the conputer component of the system are: 
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1. Large processing capacity. 

2. Large working memory. 

3. Capabilities of making consistent mechanical inferences taking 
into account all relevant facts. 

4. Processing and utilizing large amounts of actuarial information. 

5. Capabilities to store and retrieve training and reference 
material. 

6. Availability of system is limited only by reliability of basic 
ccaipiter tecihnology. 

7. No motivational or other related problems. 

The weaknesses of the machine coirponent of the system are 

1. No or very limited capacity to adapt to novel situations. 

2. No or very limited learning abilities. 

3. No or very limited metacognitive abilities, e.g., understanding 
of cwn limitations. 

4. Very difficult to program particularly the current generation of 
ejqpert systems. 



Examples of Cooperative Systems 

Uie best exairples of coc^^erative systems are intelligent training 
systems (ITS) (Sleeman and Brown, 1983; Poison and Richardson, 1987) . 
Ihe main ccoooponents of an ITS are: 1) the expert module or task 
nodel, 2) the student module or viser model, and 3) the tutor modiiLe 
or e)q)lanation subsystem. A cooperative, intelligent problem solving 
aid has to have real e>?)ertise about the task, an accurate model of the 
other intelligent agent that it is interacting with (the human user) / 
and the capabilil^ of conducting sophisticated dialogues with the 
user. RicharxJson et al. (1985) argue that the madiine corrponent 
should attenpt to conpensate for known limitations and failure modes 
that are characteristics of all forms of human problem solving: They 
are working memory failures, set and functional fixity, inference 
failures, and attentional limitations. 

One irrportant role for a cooperative intelligent system would be to 
reduce information overload by selectively displaying information 
irelevant to the hi^est priority subcorrponent of a task. Chambers and 
Nagel (1985) describe the coclq)it of a Boeing 747 with its several 
hundred instrtnnents, indicators, and warning lights as an exairple of 
vjhere skilled pilots can be siirply overwhelmed by the amount of 
available information. Plans for hi^y autxanated aircraft of the 
1990s incorporate selective displays on color CRTs of a small subset of 
the total information about the state of the aircraft that is relevant 
to the current task. The ability to display relevant information would 
prevent information overload and augment human working memory by 
providing an external represent:ation relevant information about the 
system's stiatre. 

Otiier proposals for tlie ro].e of the coirputer in a cooperative system 
focus on its computiational capabilities. Memory limitiatioas prevent 
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^anan us^ frm adequately integrating infontation about the cun^t 
state of the system and archival information cx)ncemim likelihoods of 
ooirponent failures. Ihus, the machine takes on the role of filter 
memory aid, and inference engine conpensating for known general ' 
weaknesses in the human information processing system. 

Possible Scenarios - Serious Problems 

These proposals are consistent with the large body of data about the 
strength and wea:<nesses of human diagnostic reasoning and prc±)lem 
solving. However, iirplementing these pnaposals into a functioning 
^stera can cause serious difficulties. Consider a situation involving 
the power castribution system of the Space station vdiere several 
interacting failures have occurred. Ihe system makes a series of 
incorrectinferences about the cause of the faults and displays to the 
human partner information irrelevant to successful solution of the 
problem. Such misinformation could effectively block successful 

S'i^S;i„^.-2f ^"^ulf^- ^sentially a set manipjilation. The 

ms^n^tion would be especially damagii>g if the system wer^ nonnally 

I'rr^!^^}^"^ incorrect inferences 

^lif °^ ^® the system has concluded. 

S^^JS^' incapable of independenUy diagnosing the fai.ts 

i"^t,P°^ ^^^tion system. Using its advanced ejqjlanation 

"-l ^1^^ ^.its human partner its understanding of the 
curr^t state of the power distribution system and various partial 
r^ts detained in attempting to diagnose failure, m theprocess 
system presents a series of conplex displays sho^;ing the current state 
oftiiepow^ distribution system. Ihe e>^ human user recognizes a 
co^ pattern of interrelated events and informs the con^uter of the 
2^?^.^^'^°'' ^ ^ Prttolem. The system responds by attempting to 
evaluate the human partner's input using information contained inits 
model, -mis model has a very detailed description of the limts 
SnS^.^^S^.i^?"?^^''^ processing system, and the system incorrectly 

^^"^"^ incapable of making the correct 
•SIS ^ °^ complex inpit and the solution is 

Concliisions 

Maiv readers may think that the scenario presentoa in the preceding 
section IS overdrawn. Of course, NASA would never tolerate the 
fielding of a system that was capable of effectively overruling a Space 
station crew member. However, a system in vMch human asers can 
override the machine partner conpramises the goal of developing truLv 
• "^^"Pf^^^^Q human-computer problem solving systems. Information 
overload, working memory failures, and failures to integrate historical 
data in making diagnoses are highly prxibable failure modes of human 
users. The incorrect inference made by the machine described in the 
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preceding scenario is not unreasonable and would prc±)ably be correct in 
most situations. E>$)erience with intelligence tutoring systems (Poison 
and Richardson, in press) shows that such cooperative systems are 
exceedingly difficult to construct. 



IMXMIENnATIC3NS PC5R PURIHER RESEARC3I AND CONCLUSIONS 

Ihis section contains information on recommendations for further 
research and concliodes that the difficulties in developing truly 
productive coitpiter-based systems are primarily management problems. 



Information Processing Models 

Recommendation 1> Si:5)port the development of the software tools 
required to rapidly develop information processing models of tasks 
performed on the Space Station. 

This chapter has recommended that information processing models of 
cognitive processes be the basis for the design of applications 
programs, conplex visual displays and cooperative hiHan-ccnputer 
problem solving systems. A theoretical technology should be applied on 
a large scale to solve interface design problems on the Space Station. 
Unfortunately, the develcpnent of information processing models is 
currently an art and not a rx±ust design technology. Furthermore, these 
models can be e}±remely conplex simulating basic psychological process 
in detail (Anderson, 1983) . What is required are engineering models 
(Newell and Card, 1986; Kieras & Poison, 1985) . 

Develcpnent of an effective modeling facility is an engineering 
problem, albeit a difficult one. There are no advances required in the 
theoretical state of die art in cognitive psychology. Ifodels of 
various cognitive processes have to be integrated into a single 
siimilation facility, e.g., models of perceptual, cognitive, and motor 
processes. Hi^er level languages should be developed that automate 
the generation of the simulation code and the detail derivation of 
models. A simulation development system will be required for designers 
to rapidly develop models of adequate precision for use in a timely 
fashion in the design process. 



The Conprehension of Conplex Displays 

Recommendation 2. SiKjport an aggressive research program on the 
processes involved in the conprehension of conplex, symbolic displays. 

Many tasks on the Space Station will require that crew members 
interact with conplicated displays. Exaiiples include monitoring and 
trouble shooting of conplex subsystems, manipulation and presentation 
of scientific data, and interacting with expert systems to carry out 
trouble shooting and maintenance tasks. Rapid advances in conputer and 
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di^lay technology will enable designers to develop conplex displays 
jnaking using of symbolic, color, and motion cues. Effective displays 
that facilitate performance on these cxaiplex tasks can have large 
positive effects on crew productivity, ihe complexity of the tasks and 
Qie freedom given to the designer by the display technology require 
that successful designs be based on e^licit models of how information 
in such displays is used to perform these tasks. 

Develcpnent of models of the ccorprehension of ccorplex displays 
requires iir^xartant contributions to cognitive theory. CXirrent researxdi 
in cognition and perception provides a solid foundation on which to 
build such models, it is possible that models of comprehension of 
complex displays can be based on the extensive body of theoretical 
results obtained on the processes involved in text comprehension (e.a. , 
van Di3k and Kintsch, 1983) . Excellent work on related problems is 
already going on within NASA; research programs in this area could be 
modeled in the work of Ellis and his colleagues briefly described in a 
preceding section. 



Human-Ccatpiter Problem Solving 

3. Design and st?)port an aggressive research prxagram 
leading to the eventual development of cooperative, human-computer 
problem solving systems. 

Mthou^ the many analyses characterizing cooperative human-conputer 
problem solving are correct, development of a useful cooperative system 
requires solutions to vuuolved problems in ejqjert system design, 
artificial intelligence, and cognitive science. A well structured 
research program would generate many intermediate results, conroonents 
of the eventual cocperative system, that are useful in themselves on 
the Space Station. Ifiese include robust, hi^ performance expert 
systems, advanced explanation subsystems, and various problem solving 
tools to assist the crew in management of the Space Station systems. 
^ Consider utilities of an inspectable expert system and of an 
inference engine tool. By an inspectable expert system, we mean a 
system that displays intermediate states of its diagnostic processes 
during trouble shooting. Ihe expert systems tool presents to the 
trained user intermediate results of the trx>uble shooting process using 
of conplex, symbolic displays. Properly designed, such Lnformation 
gives the human expert the information necessary to confirm a diagnosis 
or take over effectively if the expert system fails. Most current 
automatic test equipment siitply reports success or failure, e.g., a red 
li^t or a green li^t. An inspectable expert system would be a 
dramatic improvement over diagnostic systems with such limited 
feedback. 

Another useful subsystem would be a inference engine, a tool that 
combines information about system state with actuarial data on the 
likelihoods of different failure modes. This system would be designed 
to enable a skilled human user to do what if calculations and serve as 
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a ineanory aid reniinding the crew itventoer of infrequently occairring faults 
that are likely to be overlooked. 

Inspectable e«)ert systems are within the state-of-ttie-art and would 
serve as a very useful test bed for researt±i on corrprehension of 
coirplex syiribolic displays and on the design of such displays. An 
interactive inference ergine could be seen as a priinitive prototype of 
a cooperative prdDlera solving system. Both tools can be very useful in 
an operational environment arri both are iitportant intemvediate steps in 
the eventual development of hi^ performance cooperative systems. 

Ihere are iitportant areas of iresearch in cognitive science that will 
have to be better developed before it will be possible to build 
successful cooperative human-conpater problem solving systems. These 
inc].ude models of human diagnostic reasoning, cooperative problem 
solving, and iiKxiels of the processes involved in generating and 
conprehending viseful e55)lanations. A cooperative system must 
incorporate an extremely sophisticated model of its human partner vdiich 
in turn requires a detailed understanding of how humans carry out the 
specific task performed by the system as well as the general 
characteristics of the human information processing system and its 
failure modes. User itKxJels are related to the problem of developing^ 
student models in intelligent training systems. Althou^ progress is 
being made in the area of student modeling, there is still numerous 
iitportant unsolved problems (Poison and Richarson, 1987) . 

In summary, the design and development of cooperative, 
human-carputer problem solving is the most difficult of the 
technological goals related to cognitive science associated with the 
Space Station. This goal will only be achieved by a long tern, well 
managed research program. 



In RealilYf It's a Management Problem 

It is widely recognized that the ambitious productivity goals for trie 
Space Station can only be achieved with extensive use of automated 
systems that have effective xaser interfaces. However, there is a broad 
gap bot^'/een good intentions and actual develcpment practice. ^ It is 
widely recognized today that complex systems developed for civilian, 
NASA, and military use are far from the current state-of-the-art in 
human factors presenting serious problems for their users. Often, 
design errors are so obvious that applications of sinple common sense 
could lead to the development of more usable interfaces. 

In the final analysis, development of usable systems is a management 
problem. Consistent application of the current state-of-the-art in 
human factors and knowledge of cognitive processes during all phases of 
the develqpment process would have dramatic and positive effects on the 
productivity of the Space Station crew. 
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DISCUSSION: DESIGNING FOR 1HE FACE OF IHE HJIURE: 
PESEARCH ISSUES IN HUMftN<X»IEUrER INTERACTION 



Judith Reitman Olson 



TSie hardest part of generating a research agenda new for issues in 
hiin^-coitpiter interaction for the Space Station is not in finding 
inportant issues and unanswered questions that aire in need of careful 
research. It is selecting those research issues and the approaches to 
them that will answer the questions we have in the year 2000. In the 
year 2000, we will have devices that we can only dream of today; the 
Space station environment will have a mission, size, and canplexity 
that today we can only begin to sketch out. Our job, therefore, is not 
to recornrnend a research program that will answer specific questions 
that we know will arise in the design of the future Space station. 
Rather, it is to prepare for that future with a research plan that lays 
the foundation, a sound theoretical base, that will make specific 
results both easy to predict and sinple to confina empirically. 
Additionally, the research has to produce a development environment, a 
flexible hardware platform and programming environment, that allows 
rapid prototyping for enpirical testing and easy final inplementation. 
Ihese bases will se:-ve us well when we have to make specific designs 
for the year 2000. 



INTERFACES OF THE SYSTEMS OF THE FUIURE 

It is important to begin by noting those things thar are likely to be 
different in the Space Station environment than they are in the 
environments we focus our research on now. The most obvious 
differences, well discussed by both Poison and Hayes, are that the 
Space Station environment is wei^tless (with concomitant difficulties 
in forceful action and countermotion) , perhaps noisy (with difficulties 
for the implementation of speech recognition and sound production) , and 
ccsiplex (with a small number of people doing many, varied tasks with 
the help of conputers, some of vAiich they will be e55)ert in, some of 
vdiich they will not) . 

In addition, the tasks performed in the Space Station differ in 
other, more fundamental ways from the tasks we use today in our 
laboratory research on hxman-asnputer interaction. By far the largest 
amount of current research focuses on the behavior of people doing 
operational tasks; wordprocessing, spreadsheet formulation and 
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analysis, database search in si?)port of constructing a report. Our 
current research focuses on office tasks. 

Ihe Space Station, in contrast, is likely to have very little need 
for operational tasks; standard everyday tasks are more likely to be 
accorriplis h ed by ground personnel. Space Station personnel are more 
likely to be involved in: 

• the inonitoring and control of onboard systems (e.g., life 
si^jport, e35)eriinenVitianufacturing control) , 

© the occasional use of planning and decision systems (e.g. , 

e35)ert systems for inedical diagnosis or for planning for changes 
in the mission) , and 

® Ihe nearly constant use of communication systems (i.e., for both 
mission related information and for personal contact with 
friends and family) , for both synchronous conversation and 
asynchronous messages. 



LSSUES 

There are inportant reseajxh issues that are common among these systems 
and the operational systems that we focus on today, but there are 
other, additional issues that are unique, requiring particular 
enphasis. The cammon issues, important to all future human-conpiter 
interaction, include: 

1. How to design a system that is easy to learn and easy to use. 
One core feature of such a system is "consistency". Poison's 
paper makes the case for consistency — a detailed argument for 
the importance of specifically modeling the user's goals and the 
methods necessary to accomplish the goals with a particular 
system. Hvs is a very iitportant research approach that 
promises to give the ri^t level of answers to questions about 
consistency that will arise in future designs. 

2 . A second core feature in making a system easy to learn and use 
involves a strai^tforward "mapping" between the way the user 
thinks about the task objects and actions and the way the system 
requires the user to specif them. For exairple, the mapping 
between the objects of won^rocessing, such as letters, words, 
and sentences, correspond much more closely to the objects in a 
visual editor than they do to the strings and line objects of a 
line editor. Mbran (1983) has made a beginning in delineating 
this type of analysis; more theoretical work aiid enpirical 
verification is necessary. 
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3. Hew to make decisions about vAiat modes of input/output (and 
their coan[ibinations) are appropriate for a given environment and 
task. Hayes* paper discaisses a number of considerations that 
must be taken into account vdien deciding among 
speech/visual/ke]^Doard iiput and out^^ut modalities, as well as 
the use of appropriate combinations of these modalities. 

4. What characteristics of the human information processor are 
primary determinants of the range of acceptable interface 
designs. One way of evaluating a design of an interface is to 
analyze it on the basis of the major processing that a user 
engages in in order to understand the output and generate the 
next ir^ait. For exairple, we can analyze an interface for its 
perceptual clarity (e.g. adherence to Gestalt principles of 
grouping for meaning) , its load on working memory (e.g., how 
many sub-goals or variables must be retained for short periods 
in Older for users to accortplish their goals) , and irs 
requirements for recall from long-term memory (e.g., hew many 
specific rules must be learned and hew similar they are to each 
other) . Ihis approach, the cognitive science of human-coarputer 
interaction, by its generality across all epplication 
interfaces, promises to provide a theoretical thread throu^ a 
number of enpirical investigations. With a bod^ of eitpirical 
tests of its predictions, this approach can both provide a 
rx±fust base for future design situations and grow in 
sqphisticatior and precision as a base for understanding conplex 
cognition, even outside the domain of human-^xmpiter 
interaction. 

Progress on these topics will make substantial contributions to our 
understanding of hew to design human-conpiter interfaces for the Space 
Station in the year 2000, just as they will for those interfaces in 
offices and on the factory floor. 

As discussed above, however, the systems on the Space Station are 
less likely to include operational systems, like those used in research 
on the above "common" topics, and more lilcely to include planning and 
decision, monitoring and control, and comnianication systems. 
Additional, iirportant research issues arise in considering these latter 
three types of systems: 

1. What characteristics of an interface appropriately alert users 
to abnormal situations in systems that must be monitored. What 
advice, information, or immediate training can be given users of 
a monitoring system that will guide them to behave in a creative 
but appropriate manner. 

2. How are voice, video, keyboard, pointing devices, etc. to be 
used singly and in combination in each of these three types of 
systems? CJertainly voice and video have begun to be explored in 
synchronous cxammunication systems (e.g., picturephone and 
slow-scan video teleconferencing) . Kow can these modalities be 
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used to best advantage to support the need for long-tem contact 
with friends and family v^en individuals are separated for a 
long tiine? How are privacy issues accommodated in such systems, 
both for personal communication and operational communication? 

If users have to consult an ej^jert system or if some 
intelligence is incorporated into a system, hew is information 
conveyed to the user about whether the system is to be 
believed? Since current intelligent systems are "fragile," that 
is, easily put in situations for vMch their advice is not 
appropriate, we need to convey to the tiser infomation about the 
system's boundaries of capabilities. Or, better yet, we need to 
build intelligent facilities that allow the user to query or 
access the stored knowledge in ways that can mate the advice fit 
new situations more flexibly. 

Since the systems that Space Station users must deal with will 
be varied and the users will have varying e5$)ertise in either 
the task at hard or the particular system to be used, it is 
iitportant to have the system provide requisite context or 
training. Training need not be a formal module ttjat one 
accesses es^licitly, as software training modules are designed 
today. The ^^stems could be initially designed to be 
transparent (i.e, with objects and actions that fit the way the 
xaser thinks about the task) , not requiring training. Or, they 
could be built to include a "do vfliat I mean" facility or 
embedded "help" or "training" facilities, accessible either when 
the user requests it or v^en the system detects that the user is 
confused or doii>g things inefficiently. 

Most of the current theoretical bases for the design of 
htiman-corrpiter interfaces consider tasks that are well-known to 
the user. Ihe GCMS analysis of Card et al. (1983), for exanple, 
is for skilled cognition. Kieras and Poison's (1985) production 
system formalism similarly considers only skilled performance of 
cognitive tasks. However, in the Space station environment, 
users will be doing few routine tasks. They will be doing tasks 
that involve novel situations, situations that invoke creative 
problem solving, not routine cognitive skill. Space Station 
personnel, for exairple, may try to alter a system that their 
monitor has shewn is malfunctioning; they may xise the advice of 
a medical ejq^ert system to attend to a colleague v^o has an 
landiagnosed illness; they may use communication channels to 
acquire additional e55)ertise from the ground crews to solve 
onboard problems or plan new missions. In order to understand 
how these interfaces should be designed, more emphasis should be 
made in research in the area of human problem solving. The 
focus should be, for exairple, on hew to build systems that, 
minimally, do not int^erfere with the information the person 
needs to keep track of during conplex problem solving. Ideally, 
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we want to be able to build systems that augment a person's 
abilities to ej^lore and evaluate new actions in novel 
situations. 

6. Furthermore, as Hayes' paper points out, most of our current 
research on hurtan-osnpiter interaction focuses on the use of a 
system as a "tool" not as an "agent." Our understanding of 
cooperative human behavior is woefully thin. Hieoretical bases 
need to be established so that we can build systems that 
coqperate well with the human problem solver, so that systems 
can augment the intelligent human to produce an even greater 
level of understanding and action. 



APPROACHES FOR THE UNDEFINED HJIURE 

As stated at the beginning of this discussion, the most difficult 
aspect of the task of listing research issues that the Space Station of 
year 2000 will benefit from concerns predicting the Space Station 
environment and the technology that will be available at the time. We 
just don't know vtet the alternative design elements will look like. 
The best we can do at this time, therefore, is to recommend a research 
agenda v4xose results promise to be useful no matter vdiat the 
environment and technology will be. At the core of these 
recoran^ndations is research that centers on the capabilities of the 
human information processor, both as an individual and in a cooperative 
environnvent. The human will not have changed substantially by the year 
2000. 

Consequently, our understanding of human-cortpiter interaction will 
benefit from research that accumulates results from a caramon 
theoretical core that: 

1. delineates in detail the functioning of the human information 
processor, with particular eitphasis on the interaction among 
cognitive resources and those resources involved in attention 
(for monitoring systems) , problem solving (for e>qpert systems 
and decision si^port systems) , and communication, 

2. within the domain of e>5)ert systems, explores the information a 

, user needs and determines how it should be presented so that the 
user can assess the believabilitY of the advice given, aixi 

3. detennines ways to help casual users of a variety of systems to 
use them without a great deal of "start up^^ effort, either 
throu^ transparent design; effective, easy training; or 
embedded intelligent aids. 

A salient aspect of this type of research is that it is based on 
cognitive models, not on design principles* Cognitive models allow the 
excmiination of the interaction of features of the task or interface, 
which principles cannot do. Ihese cognitive models characterize 
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details of the task requires aiid details of the human information 
processor. ^ By running these models, the designer or researcher can 
determine in detail areas of difficulty in the interaction (e.g., \jhere 
the working memory is overloaded with subgoals and parameters to be 
retained) . Certain changes to the interface design could be tested by 
running these models without having to invest in the e}5)ense of a 
full-fledged usability study. The number of researchers approaching 
issues in human--caiTput:er interaction with cognitive models is currently 
very small; their numbers should be encouraged to grow. 

Furthermore, research should have as one of its goals the transfer 
of the knowledge developed in the laboratory to the design and 
development process. This calls for development of: 

1. analytic tools for assessing consistency in a particular design. 

2. analytic tools for assessing the amount of effort required in 
mapping the users' natural way of thinking about the task (i.e., 
an c±)ject/action language) into that required by the syst:em, aixi 

3. guidelines t±at will assist the designer in decisions about 
which modality or combinations of modalities are appropriate for 
a particular task and situation. 

And, if systems are to be built for an evolving futiare, they must be 
built with scars and hooks, as Hayes notes. Software should be 
designed so that it has places that will allow easy growth in 
capabilities or irput/output devices. Furthermore, research is needed 
to develop: 

1. a method and language that allows the syst:em designer to 
incorporatze good human factors into the target system (e.g., a 
"toolJcit" with components that have been designed with 
consideration for research on their human factors) , and 

2. a method that allows system developers to rapidly implement 
trial interfaces, so that they can be tested with real 
end-users, and then turned quickly into production code. 

It is clear from the papers in this session that funds devoted only 
to sinple empirical studies of users' behavior with new, increasingly 
conplex technology will not ba sufficient for answering the questions 
of the year 2000 and beyond. In contrast, research that focuses on: 

1. the abilities of the human information processor with 

concommitant widespread, specific, robust cognitive modeling, 
and 
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2. additions to the development life cycle to make the production 
of good software rapid 

can produce research that can ira>:3 the huinan-conputer interfaces on 
the Space Station of the highest possible quality for their time. 
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SYNOPSIS OF GENERAL AUDIENCE DISCUSSION 



TSfio general points were raised from the floor. 

1. VJhen discussing natural language interfaces for human-conputer 
interaction, one should make a clear separation between those 
requiring auditory input and those accepting natural language. 
Althou^ these two features are hi<^y correlated, they need not 
be. One could consider a speech irpit that would restrict 
language to a subset, such as single word commands or even 
special codes. Simlarly, there could be natural language irput 
that was entered via kei^Doard. Althou<^ there is an additional 
nvemory load inposed on the viser if speech ir^t accepted only a 
subset of natural language, there may be some applications that 
could effectively use this mode. 

2. Allen Newell wished to eirphasize the inportance of having 
specific, detailed cognitive models as the basis for designing 
human-conpater interfaces. The current researchers viio are 
using this approach is very small, and thou^ growing 
ejqxDnentially, the growth rate is very "leisurely." The 
approach has the advantage of not only specifying details of the 
processing mechanisms of cognition and their interaction, but 
also of specifying the details of the task the user is engaged 
in. Having the details of the task can provide benefits beyond 
redesign of the interface. They could serve as the basis from 
vMch the task itself could be redesigned, affording 
productivity enhancements from a strai^tf orward efficiency 
analysis. Newell recommended a strong incentive be established 
for researchers to conduct their work in the context of 
cumulative, model-based theories of cognition, aixi let the 
design principles fall from them. 
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ROBUSTNESS AND TRANSPARENCY IN INTELLIGEOT SYSTEMS 

Randall Davis 



INTRODUCITON 

Devel<^ing asid building a space station will confront problems of 
significant conplexity in an extraordinarily demanding environment. 
The station *s size and complexity will irate necessary the extensive lose 
of axitonation for monitoring and control of critical subsystems, such 
as life sifjport. The station complexity, along with the novelty of 
space as an environment, ineans that all contingencies cannot be 
anticipated. Yet the hostility of the environment means the 
consequences of failure can be substantial. 

In such situations, robustness and transparency became essential 
properties of the systems we develop. A system is robust to the degree 
that it has the ability to deal with unanticipated events. A system is 
transparent to the degree that its operation can be made canprehensible 
to an c±server. 

This paper is concerned with these two properties — robustness and 
transparency — frcan a number of perspectives. We claira that they are 
crucial to the space station undertaking (and indeed to arv/ situation 
with similar levels of complexity and similar consequences of 
failure) . We argue that they are fundamental properties of models and 
system designs based on those models. As a result, robustness and 
transparency cannot easily be grafted on afterward; they must be 
considered at the outset and designed in. We explore how this might 
happen, i.e., hew these two properties translate into constraints on 
system design and describe a number of research efforts that may lead 
to better understanding of how such design mi^t be aco^nplished. 

It is useful at this point to establish some simple vocabulary. By 
"system" or "device" we mean the hardware whose behavior we wish to 
understand and control. The power distribution system, for example, 
would include all the cables, batteries, fuel cells, solar arrays, 
switches, etc. , that si?3ply power to the station. By "model" we mean a 
description of that hardware that will allow us to analyze, interpret, 
diagnose, and guide its behavior. The model may be implicit in a 
program designed to monitor the hardware or it may exist in the mind of 
the human doing the same job. When expressed explicitly, it is 
typically written in terms of schematics, performance curves, 
engineering drawings, etc. The model also may be iiiplicit in a program 
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designed to monitor the hardware or it inay exist in the itiixd of the 
human doing the same job. In ai^ case it provides the basic framework 
iised to understand the device. 

Vlhile we speak broadly of systems and models, our concern here is 
for the most part with systems of physical devices and the asi^iated 
engineering models of them; much of vdiat we say j.s likely tc carry over 
to softwajce as well. Models of human behavior and social systems are 
largely beyond vtet we attempt to do here. 



Unanticipated Events: Motivation 

Because much of what we discuss is motivated by the difficulties of 
dealing with xananticipated events, it is worth taking a moment to 
consider vAiat they are and vAiy they are inportant. By unanticipated 
events we mean any occurrence requiring a response that has not be^en 
previously planned for, analyzed, and the appropriate response 
deteimined. 

One ccffTpelling exanple mi^t occur if the life support system 
monitors present a collection of readings that indicate a malfunction 
but do not match any known pattern of misbehavior. Ihe readings need 
to be analyzed and an appropriate response initiated, yet this cannot 
be done "by the book;" it requires that we reason throu^ \^t could 
have happened to produce such readings. 

Ihe iirportance of such events arises from their inevitability, due 
to both the ccarplexity of the space station and the novelty of the 
environment. Unanticipated events and interactions are a fact of life 
for cctttplex, large scale systems because the number of different kirds 
of things that can go wrong is sc vast, and our ability to do 
exhaustive formal analyses of fault events has rather modest limits. 
Space is a sufficiently novel environment that we have no conprehensive 
catalog of standard fault models that can be checked ahead of tiroe. 



Unanticipated Events: Exauple 

During STS~2, the second space shuttle mission, an interesting sequence 
of events lead at one point to the recognition that a fuel cell was 
failirg and later to the realization that in its degraded state it 
could conceivably e:5)lode. Ihis sequence of events helps to illustrate 
both the inevitabili"^ of unanticipated events and the kirds of 
knowledge and reasoning needed to deal with them. 

Seme brief background will help ma3ce the events conprehensible. The 
basic function of the 3 fuel cells (Figure 1) is to produce electricity 
by combining hydrogen and ojQ^en in a carefully contirolled reaction 
i;ising potassim hydroxide as a catalyst. Ihe combustion product is 
wat:er, removed from the cell by the wat:er removal syst:em (Figure 2) : 
damp hydrogen enters the condenser at the ri^t, pulled along by the 
flow produced by the motor and punp at left. Ihe motor is also turning 
a separator that pushes condensed water droplets txward the walls cf 
the chamber \Aiere they accumulate due to surface t:ension (recall i±is 
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EEGURE 1 Bie fuel cell ard water separation system. 



is a Og environment) . The now cJrier hydrogen returns to the fuel cell, 
vMle tiie annulus of wat<ir continually being forrwed at the separator is 
picked yjp and guided to the water storage area. A meter at the outlet 
monitors water pH, checking for contamination (e.g., potassium 
hydroxide from the fUel cell) , since the water is intended for 
consuDoption . 

In very much abbreviated form, the sequence of events leading to 
early mission tenninaticn of STS-2 proceeded as follows (Eichoefer, 
1985) : 

Pre-Lavmch: IXiring pre-launch activities, the fuel 

cell pH meters register hi^. 
Interpretation: Familiar, xmes^lained 
anomaly. 

Pre-launch: At various times oyygen and hydrogen 

flow meters read hi^; at one point 
oxygen flew goes off-scale. 
Interpretation: Sensors malfunctioning. 



219 



214 



FROM POWER 
SECTION 




NOZZLE 




WATER TO 
STORAGE 



FIGURE 2 Details of the water separation uiiit. 
Eichhoefer (July 1285) . 



Source: Gerald 



+ 3:00 Fuel cell 1 (PCI) begins to shed load; the other two assume 
more load. 

Interpretation: Cell may be failing. 

Controllers consider purging PCI. Degraded performance 

suggests possible flooding; hi^ also suggests flooding; 

purging will remove water. Purging PCI rejected— purged ¥DE 

mi^t solidify, blocking purge line that is common to all 3 

cells. 

+ 3:25 Crew asked to test pH manually. If sensor is correct, 
potable water may be getting contaminated b^^ ¥DE. 

+ 4:25 Crew too busy with other duties to perform test. 

+ 4:40 PCI off loads significantly 

Interpretation: Clear failure. 

+ 4:51 PCI isolated from remainder of electrical system and shut 
down. 
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+ 5;48 Mission evalviation rocaii recognizes new failure mode for the 
cell in the current situation. Once it is shut down 
pressure slowly drops, but can drop at different rates on 
each side. If pressure differential becomes large enou^, 
gas bubbles from one side can cross to the other, possibly 
ccaonbining ejqjlosively, 

+ 7;52 FCl restarted with reactant valves closed; reactants 
consumed and voltage in cell drops to 0, 

Post-mission analysis of the fuel cell ar^ ;jater separator revealed 
that the pH meter had been working correctly and that a small particle 
blocked the irozzle in the water separator of cell 1, preventing water 
removal to the storage area* de water backed xjp first in the separator 
and later in the cell, flooding the cell (hence the hi^ pH) , leading 
to performance degradation, consequent load shedding, and eventual 
failxare. 



Lessons From The Exanple 

Ihis exairple is useful for a number of reasons. It illustrates, first, 
robustness and transparency in the face of unanticipated events. The 
reasoning was robust in the sense that the blockage had not previously 
been anticipated, yet engineers were able to reason throu^ how the 
device worked, and were able to recognize ax)d predict a novel sequence 
of potentially serious consequences. The reasoning was transparent in 
the sense that the story above is cortprehensible. Even given the very 
small amount of information in Figures 1 and 2 and the short 
de53cription above, the description of the events "makes sense." 

Second, it suggests the difficulty of a prior identification and 
analysis of all failure modes and all the ways those failures may 
combine. Even with all the careful design, testing, ajnd previously 
e55)erience wich fuel cell technology, a new mode of cell failure was 
encountered. 

Third, it illustrates the kind of knowledge and reasoning that was 
required to understand, diagnose, and repair the problem. The knowledge 
involved information about structure (interconnection of parts) and 
behavior (the function of a conponent labeled "motor" or "puirp"), 
supplied by the diagrams in Figures 1 and 2. Riowledge of basic 
chemistry and physics was also involved, used to understand the 
behavior potassium hydroxide in solution ax)d the notion of surface 
tension. Iitportantly, the reasoning relies on causal models, 
descriptions of devices and processes that captuire our ordinary notion 
of vfliat it means for one event to cause another (e.g. , the motor causes 
the punp to turn which causes the l^drogen and water to move through 
the condenser, etc.). 

The reasoning involved was of several varieties. , The fourth event 
above, for instance, illustrates reasoning about behavior to predict 
consequences: if the cell is flooded, potassium hydroxide can get in 
the water, meaning it can get to the water separator and then into the 
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water storage. Another form of reasoning involved working from observed 
syitptoros to diagnoses and then to repair actions: If pci is shedding 
load, it's an indication of degraded perfonnance, vMdh suggests 
flooding. Flooding in turn suggests purging as a repair, sinple 
kncwledge of connectivity and chemistry ruled out that action in the 
event above at + 3:00: it mi^t have blocked the common purge line. 

Finally, it offers a siirple way summarizing much of vtet this paper 
is about: vMle all of the reasoning above was done by people using 
their models of the devices in question, we suggest giving coirputers 
exactly the same sort of knowl^ge and reasoning abilities. They could, 
as a result, perform as far more effective assistants. 

We believe this can be done by sv^lying them with scanething like 
the diagrams of Figures 1 and 2, with knowledge about structure, 
behavior, an understanding of causalii^/ chemistry, physics, 
electronics, and more. In short, v;e need to give them the same 
understanding of "how things work" that we vise in everyday engineerjjig 
reasoning. 

Ihe aspiration, of course, is easy, execution is considerably more 
difficult; this is clearly no small undertaking. In the remainder of 
this paper, we examine some of the research issues that arise in 
atteapting to make this happen. 

• Kow can we provide descriptions xasable by a machine that are 
equally as rich as those in Figures 1 and 2? Consider, for 
example, how much knowledge is captured by the siirple labels 
motor, pump, and condenser. 

• How can we provide the kincJs of reasoning abilities displayed 
above? ^ ^ 

® How can we provide the ability to judiciously select the correct 
model for a given prdslem? Consider how oul' view shifted from 
one grounded in physics, to one oriented towards chemistry, to 
one grounded in electronics, as the need arose. 

• How can we provide the ability to siirplify a coitplex model, 
selecting out just the "relevant" details? Consider vdiat a 
drastic, yet useful, siirplification Figures 1 and 2 are of the 
actual devices. (Consider too vtoat a misleading statement it 
was, above, to say "Even given the very small amount of 
information in Figures l and 2 . . . , the description of the 
events makes sense." It makes sense precisely because the ri^t 
level of detail was chosen. How mi<dit we get a machine to do 
that?) 

• For that matter, how do human engineers do all these things? 
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Unanticipated Events As A Focus 

Iftianticipatai events like the blockage of the water separator are an 
appropriate focus for this paper because this synposium aims to 
identify research issues for future attention rather than incremental 
iitprovement to current practice. Some useful techniques alreac^ exist 
for siinulation, faiolt insertion, and creation of error recovery 
procedures for foreseeable events. Additional work is in progress on 
techniques for error avoidance and in designing systems that are error 
tolerant. Ihere is also a well-sstablished apprmch to producing 
robustness throu^ man-machine combinations: divide the work so that 
the more routine tasks fall to the machine and rely on the human for 
resourceful responses to atypical events. All of these are 
apprqpriate, iirportant, and will continue to contribute to system 
design. 

But new research issues arise in part by asking vftiat relevant things 
we don't knew how to do very well, or at all. From that perspective, 
unanticipated events present a set of interesting and irrportant 
challenges, providing an apprcpriate focus for this paper. 

Biey also lead to increased concern about transparency. Other 
rationales alreac^ exist for transparency, including giving iisers an 
vmcJerstanding of the system's reasoning so they knew \Aien to rely on 
the conclusions, aixi the inportance of keeping the system accessible to 
human cortprehension aixi possible intervention. Dealing with 
unanticipated events adds additional motivation, most visible in the 
question of system override: to determine v4:ether a system's response 
is based on inappropriate assuitptions (e.g., an inappropriate model) , 
we need first to know vdiat those assumptions are. Transparency helps 
make this possible. 



Agenda 

Our discussion now proceeds in three basic steps. First, to help 
make clear the difficulties involved in robustness, we e>5)lore briefly 
some non-solutions to the problem. Second, we identify two broad 
categories of attack that are likely to offer some leverage on the 
problem: developing models and reasoning methods powerful enou^ to 
handle unanticipated events, and developing techniques for coping with 
situations \Aiere only iirperfect models are available. Firally, we 
describe a number of specific research topics that will help to develop 
the models, methods and techniques needed to produce robustness and 
transparency. 



SOME NON-SOIUnONS TO THE PROBLEM 

Before proposing a new attack on a problem, it's worth asking v^iether 
the problem can be tackled with known techniques. We consider three 
plausible approaches axxi es^Dlore \^*iy each of them fails to provide the 
degree of robustness we believe is necessary. 
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One traditional approach is the iise of itan-machine catibinations, 
relying on the human to handle non-routine situations* This is, of 
cxurse, loseful and can be quite effective over a range of problems, in 
the fuel cell problem of STS-2, for instance, routine monitoring was 
handled automatically, \jhile exceptions were analyzed by human experts. 

It is also clear, however, that systems currently being designed and 
used are sufficiently coirplex that this will no longer be sufficient, 
unless we can irake our automated assistants smarter* Some nuclear 
power and chemical processing plants, for instance, are conplex enough 
that non-routine events lead to massive overload on human infontation 
handling abilities* So many alarms were triggered during the Three Mile 
Island accident, for instance, that not only was it effectively 
impossible to interpret them, even detection became problematic as 
multiple alarms masked one another. Somewhat more immediately 
relevant, during shuttle mission STS-9 an alarm was triggered more than 
250,000 over 3 days, due to an unanticipated thermal sensitivity in a 
Spacelab remote acquisition unit, along with an oversi^t in user 
software. 

It is likely that similar and perhaps higher levels of canplexily 
will be involved in the space station. As a result, we need to do more 
thoii rely on the hxman half of the team to handle all exceptions. We 
need to i^^grade the ability of our machines to interpret, diagnose, and 
respcpnd to unanticipated events, enabling man-machine combinations to 
remain effective in the face of coirplex systems and novel environments. 

A second route of attack on the problem mi^t appear to be the 
creation of more reliable software throu^ irtproved software 
engineering, program verification, or automatic programming^ 
Unfortunately all of these solve a problem different from the one at 
hand here. The issue is illustrated in the figure below: techniques 
for production of reliable software all assist in ensuring that a 
program matches its specifications. Unanticipated events, however, 
will by definition not show \p in the specifications. The problem here 
is not so much one of debugging code, it is the creation and debugging 
of the model and specifications. 

Finally, given its wide popularity, we might ask what expert system 
technology^ mi^t be able to contribute to the difficulties we face. 
Here too the answer is that they have little to offer. The fundamental 
limitation in these systems arises from the character of the kna;dedge 
they use. Traditional e^qpert systems gain their power by collecting 
empirical associations, if-then rules that capture the inferences human 
e^qperts have learned throu^ ejqperience. We refer to them as enpirical 
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associations to indicate the character of the knowledge they 
capture— associations, typically between syirptons and diseases, 
gathered as a result of hvman experience* 

inportantly, those associations are typically heuristic rather than 
caxasal; i.e., they capture vdiat e55)erts have observed to happen without 
necessarily being able to esqplain v*iy it should be so. A medical 
diagnosis system, for exairple, mi^t have a rule of the form "a college 
student corrplaining of fatigue, fever, and sore throat is liJcely to 
have laanonucleosis." Ihe rule offers useful guidance even if the 
experts cannot provide a detailed caxisal (i.e., physiological) 
e)q)lanatiQn for ^y the conclusion follows. Indeed the power of the 
technology comes in pa2± from the assistance it provides in 
accumulating large numbers of fragmentary rules of thumb for tasks for 
vMch no well-defined causal theory exists. 

One iirportant consequence of this kind of knowledge, however, is a 
kind of brittleness* CXirrent generation e55)ert systems are idiots 
savant, providing impressive performance on narrowly defined tasks and 
performing well vAien the problem is exactly suited to the program's 
^5)ertise. But performance can degrade quite sharply with even small 
variations in problem character. In general the difficulty arises from 
a lack of underlying theory: since the rules indicate only what ^ 
concli;isions follow not why, the program has no means of dealing 
with cases that "almost" match the rule, or cases that appear to be 
«»minor" exceptions. Indeed, they have no notion of what "almost" or 
••itdnor" could mean. 



"FIGURING IT OUT" 

Having reviewed some existing technology that does not appear capable 
of providing the degree of robustness needed, we turn now to 
considering what kinds of ideas and technologies would help solve the 
problem. 

Ihe basic thrust of our argument is quite simple. As size and^ 
conplexity of systems increase, we see a decrease in the opportunity to 
do an e5diai;istive a priori analysis and pre-specify appropriate 
responses. The space station will likely be conplex enou^ to preclude 
such analysis; the novelty of the environment increases the chance of 
unanticipated challenges. ^ ^ 

To deal with such sitiiations we need a new approach to building 
intelligent systems, one based on a simple premise: vflien you can't say 
in advance what will happen, the ability to "figure out" how to respond 
becomes much more iitportant. Where knowledge-based systems, for 
instance, "know** what to do because th^ have been given a large body 
of task-specific heuristics, we require intelligent systems capable of 
figuring out vAiat to do. 

This ability should play a supporting role and is clearly not a 
replacement for existing approaches. Where we can anticipate and 
analyze of course we should, and where we can construct effective fault 
tolerant systems we should. But as system ccarplexity grows and the 
number and seriousness of unanticipated events increases, we need the 
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flexibility and breadth of robust problem solving systems to deal with 
them. 

The key question, of course, is how to construct systems with this 
property. In the remainder of this paper we suggest several ways of 
looking for answers to that question. 



MDDEIS MD ENGINEERING PROBLEM SOLVING 

Faced with an unanticipated event in a complex system, a powerful way 
to figure out viiat to do is by reasoning from an understanding of the 
system, a model of "how it works." A behavioral model, for instance, 
can be of considerable help in dealing with complex software like an 
operating system. In dealing with a complex physical device, a model 
of structure and function (schematics and block diagrams) , along with 
an understanding of causality can be essential in understanding, 
interpreting and debugging behavior*. 

How mi^t we proceed, for exairple, v^en faced, with a set of sensor 
readings from the fuel cells that indicate malfunction but do not match 
any known pattern of misbehavior? Ihe most robust solution appears to 
be gmmded in knowing how it works, i.e., creating and using models 
that capture structure, behavior, and causality at an appropriate level 
of detail. We need to know vtot the conponent pieces are, how they 
each work, how they are interconnected, and so forth. 

We argue that, in the roost general terms, the creation, selection, 
and xase^of appropriate models is the most powerful apprtsach to the 
problem . It is in many ways the essence of engineering problem 
solving, since, as we discuss in more detail below, models are 
abstractions, the process of model creation and selection is 
essentially one of deciding vd-dch abstraction to apply. Faced with a 
ocmplex_ system to be analyzed, an engineer can bring to bear a powerful 
collection of approximations and abstractions. 
^ As a relatively simple exairple in electrical engineering, for 
instance, an engineer may decide to view a cirx^uit as digital or 
analog, linear or non-linear. But even to approach the problem as one 
of circuit theory means we have made the more basic assunption that wp 
can model the circuit as if signals propagated instantaneously, and 
hence ignore electrodynamic effects. Models and tlieir underlying 
abstractions are thus ijbiquitous in this kind of prriblem solving. 

We believe that an important source of power in the prriblem solving 
of a good engineer is the ability to create, select, use, and 
understaM the limits of applicability of such models. Consequently, we 
believe that a powerful approach to building robust prriblem solving 
^ograms is to identify and capture the knowledge on v^ch that 
modeling ability is based. Similarly, a powerful approach to building 
transparent problem solving problems is to make that knowledge ejqjlicit 
in our programs. One general thrust of the research we suggest is thus 
broadly concerned with advancing our understanding of model creation, 
selection, and use, and demonstrating that understanding by creating 
programs capable of doing such things. 
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A second general thrust is made feasible by the fact that the space 
station is an engineered artifact, a device intended to accoirplish a 
specific purpose \*ose design is under our control. As a result, we 
can also eisk, how can we design in such a fashion that dealing with 
unanticipated events is easier? Ihat is, given the inevitability of ^ 
encountering such events and the difficulty of reasoning about them in 
coirplex systems, how should we design so that the reasoning and 
analysis task becomes easier? We speculate, for instance, about what 
"design for coirprehensibilily" ms^t inean* 

Other approaches we discuss that s.^hare the same basic mind set 
include understanding (and hence capturing in programs) "caramon sense" 
physical reasoning, and exploring the origins of robust problem solving 
in people, v^ose graceful degradation in performance is so markedly 
different from the behavior of automated systems. 

We refer to this set of approaches as "making the best situation" 
becaiase they have in ccramon the assuitption that it is hi fact pos^sible 
to model the system and approach the problem by asking how we can 
facilitate model creation and xise. 

But ^t about the alternative? how can we get rctoust behavior in 
situations \Aiere no effective model yet exists, in situations vdiere the 
only available models are inconplete or insufficiently detailed for the 
task at hand? We term that set of alternatives "making the best of the 
situation," to suggest that, lacking a model to reason from, we have to 
fall back on some less powerful methods. In this we speculate very 
briefly about research in using multiple, overlapping but incoraplete 
models. 



MDDEIS AND EROGSRfiMS 

Since much of our discussion is focused on models — creating them, using 
them, and determining their Imitations — it is worth taking a moanent to 
review briefly some of their fundamental properties. Since we will for 
the most part be concerned with embodying those models in coitpiter 
programs, it is similarly woi±h reviewing briefly the relation between 
models and programs, xmdeistanding the role the coirputer plays in all 
this. 



The Role of the Coitpater 

Let's start with the role of the conputrar. Given the size and 
coirplexitY of the space station, extensive use will have to be made of 
software to automate tasks like monitoring and control. Any such 
program inevitably enibodies a model of the task at hand. Even a 
program as siirple as one that monitors CO2 BX)d displays a warning 
\*ien the level exceeds a threshold has, implicit in it, a much 
sirrplified model of the sensing device, the environment (e.g., that 
CO2 is uniformly dispersed) , vfliat levels of CO2 are safe, etc. 
Since models and coroputer programs are often so closely intertwined, it 
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is iipportant to vinderstand what the model can contribute and vdiat the 
coitputer can contribute. 

The computer brings to the task a nuniber of useful properties. It 
offers, for exairple, a vast increase in information processing power. 
Uus power, in turn, makes possible the construction and use of models 
that are orders of magnitude larger than any we could create by hand. 
Ihe power is useful even with simple models, where it makes possible 
determining less obvious consequences, as in cases when strai^tforward 
searxJh in chess can determine the long-term consequences of a move. 

_ Ihe computer has also facilitated the construction of many different 
kinds of models, including those that are non-numeric. As a result of 
work in computer science generally and AI in particular, we now 
routinely build and compute with models that are symbolic, qualitative, 
and incomplete. Symbolic models erttoody non-numeric inferences (e.g. , 
"if the current shuttle pilot is Joe, on scr^ 1 display elapsed time, 
Houston time, and fuel levels ") . C2ualitative models^ describe and 
reason about behavior using the language of deri^/atives commonly 
eirplqyed by engineers (e.g., "if the voltage at node N3 increases then 
rate of discharge of capacitor C4 will decrease") . Most current expert 
systems are based on models that are incomplete, in the sense that they 
cover a number of specific cases (e.g., "if valve V3 is open and the 
tank temperature is hi^, then close valve V4") , but may leave 
unspecified what action to take in other cases (e.g., what to do if V3 
is closed) . 

Wbrk in AI and cognitive science has facilitated understanding and 
capturing other types of models as well, including mental models^, 
the vastly simplified, occasionally inaccurate but effective 
representations of mechanism and causality that people use in dealing 
with the world. My mental model of hew the telephone system works, for 
instance, is quite a bit different from reality, but quite useful. 

The compater also brings to the table a strong degree of "mental 
hygiene." Models ei^jressed in English and left to human interpretation 
produce a notoriously wide variety of conflicting results. Ihe 
remarkably literal-minded character of conpiter-based models enforces a 
degree of precision that we mi^t not otherwise achieve in ar^ 
outside of those handled with formal mathematical analysis. 

Ejqjressing a model in a program also makes it far easier to test it 
by example, since determining its predictions is a matter of running 
the program rather than working out the consequences by hand. Tnis in 
turn facilitates finding ambiguities, oversi^ts, and limitations, and 
thus aids in extending the model. 

All of these are useful and important properties. But for our 
purposes even more important is what the computer doesn't bring to the 
task, vdiat embodying the model in a program does not do. It does not 
by itself provide either robustness or transparency, simply put, 
robustness and transparency are properties of models and systems, not 
properties of programs that may be monitoring or controlling those 
systems. 

This single observation has two important consequences. First, it 
means that we cannot create robust or tran^arent systems simply by 
developing software. It will not do, for instance, to design a highly 
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cxxiplex system and then develop an equally coonoplex piece of software 
that atteitpts to monitor, interpret, and perhaps control it. layers of 
cortplexity will only make it irore difficult to deal with novel 
situations. 

Perhaps the sirtplest demonstration of the futility of this approach 
canes in dealing with events that may be outside the range of 
applicabililY of the program. Ihe nvore corrplex the underlying system, 
the more conplex the program needed to interpret it, i.e. , the more 
ccarplex the model of that system needs to be. Ard the more catplex the 
iftodel is, the more difficult it becomes to determine whether it is 
based on assumptions that do not hold for the current situation, and 
hence the current events are outside its range of applicability. 

Second, if robustness and trcinsparency are properties of models and 
systems, not properties of programs, it follows that they cannot be 
grafted on, they must be designed in. That is, we need to understand 
how to design in such a fashion that the resulting systems have those 
properties, and how to create models that have those properties. One 
of the research strategies we suggest in this paper is to turn this 
question around, ai^ ask how the desire for systems with these two 
properties can be translated into constraints on system design. That 
is, is it possible to design in such a way that the resulting systems 
are easy to nKxiel robustly and transparently. 



Robustness and Transparency in Models 

We have argued that robustness and transparency are properties of 
systems axYi models rather than of programs and that a primary route to 
resourceful systems is the creation of models with these properties. 
But that isn't easy. To see vftiy not, we examine the kinds of things 
that commonly get in the way. 

Three caramon sources of failures of robustness are inccampleteness, 
information overload, and incorrect level of detail. Models may be 
inconplete because information that sho^old have been inclvided was 
omitted. A particularly relevant example arose in the Solar Max repair 
during Mission 41-C. The initial attenpt to attach to the satellite 
failed because additional, undocumented hardware bad L«en added to the 
satellite near the attachment point, preventing the mating of the 
satellite aivi the attachment device. The lesson here is the obvious 
one: you can't reliably figure out vtot to do if your picture of the 
device in question is inconplete. 

A second source of failure of robustness — information^ 
overload — occurs vdien information processing ability available is 
overvAielmed by the amount of data or the size of model. The data rate 
may be so hi^ that it cannot be interpreted fast enough. The model 
itself may be so large that it outstrips the processing power 
available. The issue here is the same for man or machine: in either 
case the available processing power may be insufficient to use the 
model. The lesson here is the need to ensure that the models we build 
are coirputable with the power available* 
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Information overload is frequently a result of the thicd common 
souroe of failure: selecting the wrong level of detail, in particular 
choosing too low a level. Attempting to model the behavior of a digital 
circuit using quantum mechanics might be an interesting challenge, but 
would surely drcwn in detail, if, on the other hand, too high a level 
is chosen, the model omits relevant phenomena. For exanple, some 
circuit designs that are correct vdian viewed at the digital le/el may 
m fact not work due to effects that are Qbviou;£: only when viewed at 
the analog level. 

All of this leads us to a fundamental difficulty in designing and 
using models. Robustness d^jends in large measure on ccarpleteness of 
the model. Yet all models are abstractions, siirplifications of the 
thing being modeled, so no model can ever be entirely conplete. Nor in 
fact would we want it to be. Much of the power of a model arises frcm 
its assumption that some thir^ are "unimportant details," causing them 
to be cjnitted. There is power in this because it allows us to ignore 
sane phenonena and concentrate on others; it is this license to omit 
scroe things that reduces the infonnation processing requirements of 
using the model to within tolerable levels. 

But there is as a result a fundamental tension between conpleteness 
(and attendant robustness) and complexity, if we make no simplifying 
assuirptions we drown in detail; yet any simplifying assunption we make 
way turn out to be incorrect, rendering our model inccmplete in some 
aitportant vray. This in turn raises interesting questions, further 
explored below, including how we select an appropriate model, i.e., an 
^prqpriate set of simplifying assumptions, and how we mi^t recover in 
the event that we select one that is inappropriate. 



RESEARCH TOPICS 

In this section we discuss in broad terms a number of research topics 
relevant to the overall goal of building systems that are both robust 
and transparent. For the roost part, we proceed frcm the assumption 
that getting machines to assist in significant ways with reasoning 
about situations like the STS-2 fuel cell problem will requirr that 
they have appropriate mode].s. We then ask how those models can be 
created and indeed how we can design the device from the outset in such 
a way that the model creation process is made sinpler. 



Model Selection and Creation 

Selecting and creating models is perhaps the most fundamental issue in 
solving engineering problems and an inportant determinant of the 
r^ustness of the solution, it is a skill that is in some ways well 
known: it's what good engineers have learned to do thraigh years of 
eiit^^jioe. The goal here is to understand that skill and experieDce 
well enough that it can be embodied in a program, allowing automated 
assistance in selecting and creating appropriate models. 
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m alitcst aiiy design or analysis problem, the most basic question is 
how to "think about" the Qbjec± in question, i.e., how to model it. 
Given the acknowledgment that all models are rj^stractions, it is futile 
(and as we have suggested, inappropriate) to seek perfect corrpleteness 
aixi rcbustness. Ihat in turn means that the modeling decision concerns 
v*at to pay attention to, i.e., vdiat properties of the c±)ject are 
relevant to the task at hand and \^ch can safely be ignored. Hence 
the goal is to find a model with two properties. First it should be 
cxsipletje enou^ that it handles the inportant phenomena. Second it 
should be abstract enou^ that it is coirputable and capable of 
produciiig a description at a useful level of detail (i.e., even if it 
were possible, it would be of little vise to produce a picosecond, 
microvolt-level analysis of a circuit vAiose digital behavior is of 
interest) . But naming the goal is easy; the research challenge is in 
fiixiing a nore precise iinderstanding of v4xat it means to "consider the 
task" and to determine when a model is "corrplete enou^", "abstract 
enou^", and at an appropriate level of detail. 

One possible route to understanding the nature and character of 
models is to define the kinds of abstractions comonly vised in creating 
them. This mi^t be donr. by detemvLning \Aiat kinds of abstractions are 
ccfftirnonly (and often irtplicitly) eitployed by engineers. What are the 
rest of the terms like digital, analog, linear, etc.? Is there just an 
unstructured collection of such terms or is there, as we would guess, 
scffie sort of organizing priiiciple that can be used to establish an 
orderir^ on them? If so, we mi^t be able to say more concretely vAiat 
it means to proceed from a more abstract to a more precise model and 
mi^t be able to develop programs capable of such behavior. It is 
unlikely that there is a siirple, strict hierarchy that will allow us to 
move in a single, unambiguous direction. Much more likely we will find 
a tax^led graph of models; part of the task is to sort out the 
different kinds of interconnections likely to be encountered. 

A second possible route to understanding the nature of models arises 
from the sluple observation that models ignore details. Perhaps then 
different kmds of models can be generated by selecting different ^ 
ccaiibinations of details to ignore. The task here is to ch::iicicterize 
different "kinds" of details; the ideal set of theia would not only 
generate known models but mi^t suggest addition?.! models as well. 

By either of these routes— studying the kinc3^ of abstractions used 
or the kirxJs of details ignored — we might be able to produce an array 
of different kinds of models. That brings us to the problem of model 
selection, determinirig vAiich to use in a particular situation. Some 
assistance nay be provided by knowing hew the array of models is 
organized, i.e., what it means to be a "different kind of model." The 
difficulty arises in determining what the ijtportant phenan^ena are in^ 
the problem at hand and selecting a variety of nodel capable of dealing 
with it. How is it that a human engineer knows vAiich approximations 
are plausible and which are likely to lead to error? 

It is unlikely that we will ever be able to guarantee that the 
knowledge used for model selection is flawless or that the models given 
to the prxDgram are flawless. We thus need to confront the problem of 
detecting and dealing with models that are inappropriately chosen for 
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tlie task at hand or that are incatplete in some relevant detail. Human 
engineers at times make the wrong selection or use a faulty model yet 
are capable of detectirg this and dealing with it. How might .-a qet 
machines to do the same? 

_ Finally, note that progress on model selection will have an 
laportant iirpact on the sonswhat loaded issue of system override if 
as we have argued, unanticipated events are inevitable, simply having' a 
detailed model is not enou^: events may occur that are outside the 
range of applicability of the mcxJel. ihis can be a particularly 
difficult problem because it concerns deciding "how to think about" the 
problem. 

We argue that override is fundamentally a decision that a particular 
model IS inappropriate. Consider the example of a program monitoring 
and controlling life support. We mi^t be tempted to override its 
decisions if they seem sufficiently different from our own, but why 
^ould they differ? Ihe most basic answer seems to be that the model 
the program is using to interpret sensor readings is inapprx:priate 
I.e., based on assumptions that are i.jt valid in the current situation 

°nly cijjective way to discover this is ty determining v^y that 

model was chosen, vdiat approximations it embodies, and vdiat the 
limitations are on those approximations, since much of this 
information was used to make the model selection to begin with, 
leverage on the override problem can ccsne from understanding nodel 
selection and, uiportantly, fran making e}q)licit both the model itself 
and the assumptions underlying it. This would give us r^ixsonably 
objective grounds for the override decision, siiice the modal and its 
underlying assumptions will be available, and can be examined and 
conpared to the current situation. It also reminds us how important it 
IS that such information be made ejqjlicit, rather than left implicit in 
the program code or the mind of the program author. 



Model Specification Needs To Be Less Trouble Than It Is Worth 

We have repeatedly stressed the iirportance of models as a basis for 
rc^t reasoning about complex systems. But specifying those sodels is 
not an easy task, for several reasons. At the simplest level the issue 
IS volume: there is an enormous amount of information tr> be captured. 
Existing design capture systems don't deal well with tne problem 
because they don't make the infomation collection process easy enoucdi 
nor do they offer sufficient payoff once the information is entered to 
provide a motivation for doing it. They are in general more trouble 
than they're worth. ^wu^jxe 

For design changes in particular, it is today often easier simply to 
try out the change and then (maybe) go back and update the 
specification database. In the case of Solar Max, for instance, pertiaps 
the additional hardware because it had been a<3d^ at 
the last minute and never documented. The problem of documentira code 
is similar: it's often easier to try it out, then document, often the 
documentation never gets done because it sinply isn't viewed as 
critical to the undertaking. 
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Ihe problem is both organizational and technical. Organizational 
issues arise because design documentation is typically of least use to 
the original designer, v*io is most familiar with the object. Ihere 
should be a value structure v;ithin the organization that inal<BS clear 
the lirportance of si^^plying corrplete design specifications and 
eicphasizes that, as in Solar Max, the consequences of even minor 
omissions can be serious. 

But there is a itore radical position on this issue that is surely 
worth e35)lorijig. It ou^xt to be iitpossible to create or modify a 
design without doing it via a design capture system. Put sli^tly 
differently, there should be a design capture system so useful that no 
one would thirdc of proceeding without it. The thou^t is Utopian but 
not so far afield as it mi^t seem. Existing VIST design tools, for 
exanple, providing sufficiently pov/erful functionality that no major 
design would be done without them. Even their basic 
functions— schematic capture and edit, design rule checking, 
simulation— provide sufficient r^i^ck to make them worth the 
trojble. 

Existing tools also illustrate important limitations: they capture 
the final result, but not the rationales, not the design process. An 
effective system would be one that was useful from the earliest "sketch 
on the back on an envelqpe" stage, and that captured (and aided) every 
step and decision along the way. The result would be a record that 
included not only the final design, but its intended functionality, all 
rationales for the design choices, etc. 

The technical problems in creating such a systzem include standard 
concerns about a good int:erface, such as ease of use and portability; 
paper is still hard to beat. But the issues go considerably deeper 
than that. Engineers find communication with each other possible in 
part because of a large shared vocabulary amd base of e>qperience. ^ 
Qxnmunication with a design capture syst:em should be based on similar 
knowledge; the identification axd representation of that knowledge is a 
sizable reseaixh task. 

The relevant vocabulary includes concepts about structure (shape, 
connectivity, etc.) ax^ behavior (vtot the device should do). Both 
present intieresting challenges. While connectivity is relatively 
strai^tforward, a conpact and appropriatie vocabulary for shape is not 
obvious. Behavior can sometimes be captxired by ssquations or short 
segments of code, but descriptions in that form soon grow unwieldy and 
opaque. We need to develop a vocabulary for behavior capable of 
dealing with considerably more carplex devices. 

There is also the problem of unspoken assuirptions. ^ If design 
capture syst:ems siitply transcribe vtot is expressed literally, forcing 
every fact to be made explicit, the description task will always be 
overviielming. We need to imderstzand axd acomtulate the knowledge and 
design conventions of engineers so that the syst:em can make the 
relevant inferences about vihat was intended, even if not expressed. 
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Designing for: Testabilii^/ Diagnosabilil^, Analyzabili-t^/ 
Ocatprehensibili-tY/ Transparency,... 

We have argued that the cxanplexily of the station and the novella of 
the environment preclude an esdiaustive a priori analysis of 
cxantingencies and reqiure instead an ability to figure out vAiat to do 
in the face of unanticipated events. We have suggested that this in 
turn is best facilitated by "knowing how things work," i.e., having a 
model of structure and behavior. 

The ccffrplexiiY of the systems we design clearly has an iitpact on 
both hew easy it will be to create such models and how easy it will be 
to reason with them once they exist. Since we are in fact designing 
the station (rather than trying to model a naturally occurring system) , 
it is worth asking what can be done at the design state to facilitate 
model creation and model use. 



Design fo r Testability Design for testabiliiy is one relatively well 
known approach in this category'. It acknowledges that newly 
manufactured devices have to be exhaustively tested to verify their 
correct operation before they are placed in service and suggests that 
we design in ways that facilitate this task. Substantial effort has 
been devoted to this in ciixuit design, v;ith some success. Given the 
likely need for equipmeixt maintenance and the difficullY of a house 
(station?) call by service technicians, it will be useful to design the 
station in such a way that basic diagnostic tests can easily be run on 
devices that may be malfunctioning. Where well known concepts like 
ensuring that signals are observable and controllable are likely to 
carry over easily, part of the research task here lies in extending 
techniques developed for siirple digital circuits to deal with much 
larger subsystems. 



Desicm for Dlagnosability Designs for diagnosabiliiy is a less well 
xmderstood task. Where testing involves methodically trying out all of 
the designed behaviors of the device, diagnosis is a process of 
reasoning frm the observed syirptoms of malfunction to identify the 
possibly faullY ccmponents. Diagnostic power is measured in part by 
discrimination abiliiy: more powerful diagnostic reasoning techniques 
iitplicate fewer ccnponents. But some problems are inherently 
ambiguous—a devica may be designed in such a way that the <±>served 
symptcans must correctly irrplicate a large number of different 
coicponents. Design for diagnosabiliiy would involve designing in a way 
that avoids this situation. Put more positively, it would mean 
designing in ways that seek to minimize the number of coirponents 
implicated by a malfunction. 

One very slirple observation along this line can be made by 
considering the topology of the device: the only subcomponents that 
can be responsible for an observed syitptcm are those that are "causally 
connected" to it. In an electronic circuit, for exairple, the most 
obvious causal connections are provided by wires. More generally. 
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there must be sam sequence of physical interactions by viiich the error 
propagates £ram its source to the point vAiere it is c±>served. The 
fewer such interactions, the fewer caixJicSate subccirponents. Siirply 
put, this argues for "spairse (modular) designs," i.e., those with 
relatively few interconnections. 

Designs with uni-directional coitponents (i.e., those that operate in 
a single direction and have distinct iiputs and outputs, like logic 
gates and vinlike resistors) , also have smaller candidate sets. In 
devices with imi-directional corrponents there is a single direction of 
causcililY/ giving us a notion of "i5)stream" and "downstream" of the 
synptcm. Only conponents that are \3pstream can be responsible for the 
synptcsn. 

Diagnosis also involves probing, i.e., taking additional 
measurements inside the device, as well as generating and running tests 
designed to distinguish among possible candidate subcorrponents. We 
mi^t also examine desicpi styles that facilitate both of these tasks. 



Designing for Analyzabilitv, Oamprehensibility. Transparency Given our 
eirphasis on beir^ able to figure out vAiat to do, perhaps the most 
fundamental thing to do early on is vAiat mi^t be called design for 
analyzability or conprehensibilily. If we have to think about how the 
device works and reason throu^ the possibly subtle effects of an 
vmanticipated event, then let's at least make that easy to do. This 
may be little more than the traditional admonition to "keep it sinple," 
here given the additional motivation of on-the-spot analysis and 
response. 

Sinplicity in design will aid in making that easy; it may present 
additional virtues as well. Siitplicity often produces transparency, an 
important oorrponent in people's willingness to accept automated 
assistance with critical tasks. Sirrplicity will help achieve NASA's 
design goal of allowing crmis to intervene at low levels in any station 
subsystem. 

Finally, sinplicity may also produce robustness by assisting in 
determining vftien a model is inappropriatie. We argued above that the 
override decision is part of the model selection process and could be 
facilitat:ed by making e>qolicit the siirplifying assuirptions underlying 
each model. Those assunptions mi^t not always be specified 
conpletely, at times it may be necessary to det:en^iine vAiat tiiey are. 
This is likely to be easier to det:ermine if the model it:self can be 
analyzed easily. 



Robustness Requires Gammon Sense 

Current es^^ert systems are brittle in part because tiiey lack common 
sense knwledge, that large collection of siitple fact:s about the world 
that is shared across a cultzure. At the siitplest it may include facts 
siidi as physical objects have mass ax)d take up space, that two tilings 
cannot ocorjy the same space at the same time, or that objects that are 
vinsi:5)ported'will fall. In the absence of such an underpinning of world 
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knowledge, the system must interpret its rules with canplete literal 
Handedness and can do little in situations in which -he rules "almost" 
apply. 

Consider for example a rule in a medical diagnosis expert system 
speci^ing in part that "the patient is between 17 and 21 years old." 
Does the rule apply if the patient is 16 years 11 months old? How 
aboo.t 16 years 5.9 months? Oar common sense knowledge of the world 
tells us that the human body doesn't change discontinuously, so the 
rule IS probably still relevant. Canpare this with a rule that says 
"If the postmark date is after April 15, then the tax return is late." 
Here we know, again from common sense knowledge, that there is in fact 
a discontinuity. Each of these chunks of common sense is simple enou^ 
and easily added to a system; the prc±»lem is finding and representing 
the vast collection of them necessary to si^jport the kind of reasoning 
people do with so little effort. 

For engineering problem solving of the sort relevant to our concerns 
here there is another layer of v^t we mi^t call engineering common 
sense that includes such facts as, liquids are incompressible, all 
objects are affected fcy gravitational fields, but not all objects are 
affected by electromagnetic fields, electromagnetic fields can be 
shielded, and so forth. Engineers also know large numbers of simple 
facts about functionality, such as what a valve does, and vdiy a door is 
lilce a valve. 

The research task here is the identification, accumulation, 
organization, and interconnection of the vast numbers of simple facts 
that make \jp common sense (Lenat et al. , 1986) and engineering common 
sense. Only with this body of knwledge will we be able to create 
systems that are more flexible and less literal minded. 

What is the Source of Human Robustness? 

Since robustness in problem solving is a common trait of e^qjerienced 
engin^rs, we ought to take the obvious step of examining that behavior 
and attenptmg to understand its origins. What is it that human 
experts do, what is it vdiat they knew, that allows them to recognize 
and deal with inadequate models? Why is it that human behavior seems 
to degrade gracefully as problems become more difficult, rather than 
precipitously, as is the case with our current programs? Part of the 
answer iiiay lay in the number of and variety of models they can use 
along with their bod/ of common sense knowledge. ' 

Multiple MbdeJs 

^us far our approach has focused on creating robustness by reasoning 
from detailed models. But how can we get robust behavior in situations 
vjiere no effective model yet e>dLsts? One quite plausible reason for 
this would be incomplete information: even assuming we know all the 
limits of the models we have, selection of an appropriate one mi^t 
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depend on a fact about the system or environment that we sojiply don't 
have yet. In this section, we speculate on one possible approach to 
such problems. 

One idea e^^plored to some degree in the HEARSAY system (Erroan, et 
al., 1980) for speech understanding involves the use of miltiple 
knowledge sources, each dealing with a sli^tly different body of 
knowledge. Our inperfect knowledge about the task — interpreting an 
utterance as a sentence — ^means that none of the knowledge sources can 
be gi:iaranteed to be correct. Ihe basic insist here is to eanoplqy a 
groiqp of cooperating experts, each with a different expertise, in the 
hope that their individual weaknesses are distinct (and hence will in 
some sense be inutually coon^pensated) but their strengths will be 
lautually reinforcing. 

A siioilar technique mic^t be laseful in engineering problem solving: 
lacking aiiy one itKDdel believed to be appropriate, we lai^t try using a 
collection of them that appear to be plausible aM that have somewhat 
different conditions of applicability. Even given such a collection, 
of course, there remains the interesting ax)d difficult problem of 
deciding how to combine their results viien the outcanes are (as 
e55)ected) not identical. 



SUMMARY 

We have argued that the catplexity of the station and the novelty of 
space as an environment makes it iirpossible to predict and analyze all 
contingencies in advance. The hostility of the environment means the 
consequences of failmre are substanticil. In such situations, 
robustness aid transparency become essential properties of the systems 
developed. Systems are robust to the extent that they can deal with 
events that have not been specifically anticipated axd analyzed. They 
are transparent to the extent that they can make their reasoning 
conprehensible to an observer. 

Given the inevitability of xmanticipated events, robustness is best 
acconplished by "figuring out" what to do, rather than relying on a 
list of predetermined responses. But "figuring out," the sort of 
analysis and reasoning routinely done by engineers, can only be done if 
you "know how it works," i.e., have a model of the device. We tha^ 
believe that a key source of power in engineering reasoning is the 
collection of models engineers use, along with the approximations and 
ar>stractions that underlie the models. One major thrist of research 
then should be directed toward understanding the processes of model 
creation, selection, and sinplification. 

Given the serious consequences of working from inconplete 
information, a second major thrust should be devoted toward model and 
design capture. Existing systems for VLSI design are effective enough 
to make them essential tools, and hence effective in some aspects of 
design capture. We need to provide similar levels of tools for all 
varieties of design and need to landerstand how to capture design 
rationales as well as the final result of the design process. 
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Given the difficulty of the reasoning process even with cxjitplete 
information, we suggest turning the question around and asking vtet we 
can do at design time to make the reasoning task easier. We have 
speculated about vdiat design for testability, diagnosability, and 
cotprehensibility mi^t mean, and suggest further eJ5)loration there as 
well. 

Finally, it appears that additional leverage on the problem is 
available frcan examining human performance to determine the sourt:e of 
rdbustr^ss in our own problem solving behavior, and frcm corpiling the 
large body of ccanmon sense knowledge that seems to be a source of 
graceful degradation in himan problem solving. 
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NOTES 

1. Rich and Waters, eds. , Artificial Intelligence and Software 
Engineering, Morgan Kaufitnann, 1986, is a recent survey of atteitpts 
to use AI approaches to this problem, it provides a historical 
ovsrview and a wide-range view of the problem with extensive 
references. Also see the IEEE Transactions on Software Enqineerincr . 

2. Davis, Buchanan, Shortliffe, Production rules as a representation. 
Artificial Intelligence ^ February 1977, Vp. 15-45, provides an early 
overview of mcm, the first purely rule-based ejqpert system. 
Waterman, A Guide t o Expert Sy stems^ Addison Wesley, 1986, .is a 
recent text oriented toward commercial applications of the 
technology and provides a large set of examples and references. 

3. Bobrcw, ed.. Qualitative Reasoning About Hivsical Systems . 
North-Holland, 1984, is the book version of the December 1984 issue 
of Artificial Intelligence, a special issue on that topic. Nine 
articles illustrate the variety of models and tasks attacked, 
including diagnosis, design verification, behavior prediction, etc. 
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4. Relatively little work acJdresses this topic directly. Patil, 
Szolovits, and Schwartz, Causal xmderstanding of patient illness in 
medical diagnosis, Proc Seventh Intl Jt Conf on AI . Ep. 893-899, 
eaqplores the conibined vise of three different kinds of models in 
diagrK)stic reasoning. Udkibs, Granularity, Proc Ninth Intl Jt Conf 
on AI . i^. 432-435 speculates on ways of producing coarser grained 
models frcan fine grained ones. 

5. See the deKLeer, Williams, and Forbus articles in Bobrow ^ qp. cit. 

6. See, for example. Centner and Stevens, Ment * "! Models , Lawrence 
Erlbaum, 1983. 

7. Breuer, A methodology for the design of testable large-scale 
integrated circuits. Report SEKtR-85-33 , January 1985, Space 
Division, Air Force Systems Carnmand, provides a wide-ranging 
overview of different testability tecihniques> 
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DECISION MAKING— AIDED AND UNAIDED 
Baruch Fischhof f 



INTRDDUCnCSN 

Decision making is part of most human ac±ivities, including the design, 
operation, and monitoring of space station missions. Decision maMng 
arises v^enever people must choose between alternative courses of 
action. It includes both global decisions, such as choosing a 
station's basic configuration, and local decisions, such choosing the 
best way to overcame a minor problem in executing an onboard 
ejqperiment. Decision making becomes interesting and difficult v*ien the 
choice is non-trivial, either because decision makers are unsure v*iat 
outcomes the different courses of action will bring or because they are 
unsure vdiat outcomes they want (e.g. , vdiat tradeoff to make between 
cost and reliability) . 

mch of science and engineering is devoted to facilitating such 
decision making, vhere possible even eliminating the need for it. A 
sign of good engineering management is that thejre be no uncertainty 
about the objectives of a project. A sign of advanced science is that 
there are proven solutions to many problems, showing how to choose 
actions vdiose oitcomes are certain to achieve the chosen objectives. 
Vtere the science is less advanced, the hope is to routinize at least 
part of the decision-making process. For exairple, the techniques of 
cost-benefit analys.is may make it possible to predict the economic 
consequences of a proposed mission with great confidence, even ir Lhose 
techniques cannot predict the mission's risks to lives and property or 
show how those risks should be weic^ed against its economic costs and 
benefits (Bentkover et al., 1985; Fischhof f et al., 1981). Or, current 
engineering knowledge may allow automation of at least those decisions 
where electronic sensors or human operators can be trusted to provide 
accurate initial conditions. Indeed, space travel would be iitpossible 
without extensive ccmputer-controlled decision making for problems 
involvirg great cotrputational ccarplexitY or time pressure (e.g. , during 
launch) . 

An overriding goal of space science (and other applied sciences) is 
to e)q3and both the range of problems having known solutions arKi the 
ttichnological capability for deriving and activatir.^ those solutions 
without huiim intervention. In this pursuit, it is aided by concurrent 
efforts in other fields. Among them is cognitive science (broadly 
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defined) , vdiose practitioners are atteirpting to diversify the kinds of 
problems that can be represented and solved by corrpiter. 

Yet, however far these developments progress, there will alwai's be 
scsne (fecisions that are left entirely to human jiidgment and some 
elements of judgment in even the most automated decisions. For 
exanple, there is no formila for unambiguously determining vdiich basic 
design configuration will prove best in all anticipated circumstances 
(much less unanticipated ones) . Analogously, there is no proven way to 
select the best personnel for all possible tasks. VJhen problems arise, 
during either planning or operation, judgment is typically needed to 
recognize that something is wrong and to diagnose vAiat that something 
is. VJhen alarms go off, jxadgraent is needed to decide viiether to trust 
them or the system that they mistrust. When no alarms go off, 
si:?)ervisory judgment is needed to decide viiether things are, in fact, 
all ri^t. However thorou^ training may be, each operator must 
continually worry about \^ther others have understood their (possibly 
ambiguous) situations correctly, and followed the appropriate 
instructions. VJhen solutions are programmed, operators must wonder how 
good the programming is. When soliitions are created, engineers must 
guess at hew materials (aiid people) will perform in novel 
circumstances. Althou^ these guesses can be aided axxi disciplined by 
scientific theories and engineering models, there is cJways some 
element of judgment in choosing and adapting those models, coirpaunding 
the \mcertainty due to gaps in the underlying science. Any change in 
one part of a system creates uncertainties r'egarding its effects on 
other system componants. In all of these cases, viierever knowledge 
ends, ji:idgment begins, even if it is the judgment of highly trained and 
motivated individuals (Fischhoff, 1987; McOormick, 1981; Perrow, 1984). 

Understanding hew good these judgments are is essential to knowing 
how mich confidence to place in them and in the systems that depend on 
them. Understanding hew those judgments are produced is essential to 
inproving them, whether through tr3ining or judgmental aids. Such 
understanding is the goal of a loosely bounded interdisciplinary field 
known as behavioral decision theory. The "behavioral" is meant to 
distinguish it from the study of decision making in mainstream American 
economics, whidi rests on the it^tatheoretical assunption that people 
always optimize vihen they make decisions, in the sense of identifying 
the best possible course of action. Although plausible in some 
circumstances and essential for the invocation of econopiics' 
sophisticated mathematical tools, the assutrption of optiinization 
severely constrains the kinds of behavior that cm be observed. It 
also leaves economics with the limited (if difficult) goal of 
discerning vdiat desires people have succeeded in optiitiizing in their 
decisions. Behavioral decision theory is concerned with the conditions 
conducive to optiitiizing, the kinds of behavior tliat come in its stead, 
and the steps that can be taken to inprove people's performance 
(Fischhoff et al., 1981; Kahneman et al., 1981; National Research 
Council, 1986; Schoemaker, 1983; von Winterfeldt and Edwards, 1986). 

Research in this tradition draws on a variety of fields, including 
psychology, operations research, management science, philosophy, 
political science, and (some) economics. As it has relatively little 
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institutional structure, it itii^t be best thou^t of as the cx)njunction 
of investigators with several shared assuirptions. One is the 
concurrent pursuit of basic and applied knowledge, believing that they 
are icaitually beneficial. A second is the willingness to take results 
from any field, if th^ seem useful. A third is interest in using the 
latest technology to advance and e)^loit the research. Ihese are also 
the assuirptions underlying this chapter, v4iich atteirpts to identify the 
most prcnising and important research directions for aiding space 
station development. Because of the space station's role as a pioneer 
of advanced tedinology, such research, lite the station itself, would 
have iirplications for a wide range of other applications. 

The results of research in behavioral decision theory have shown a 
mixture of strergths and weaknesses in people's atteirpts to make 
decisions in ocmplex and uncertain environments. Ihese intuitive 
psychological processes pose constraints on the decision-making tasks 
that can be iirposed on people and, hence, on the quality of the 
performance that can be ejqpected from them. Ihese processes also offer 
opportunities for decision aiding, by suggesting the kinds of help that 
people need and can accept. Ihe following section provides a brief 
overview of this literature and points of access to it, couched in 
qiiite general terms. Ihe next section considers some of the special 
features of decision-making in space station design and operation. Ihe 
following three sections discuss the intellectual skills demanded by 
those features and the kinds of research and development needed to 
design and augment them. Ihese prpperties are the needs: (a) to create 
an e}q5licit HKxiel of the space station's operation, to be shared by 
those involved with it, as a basis for coordinating their distributed 
decision makirg, (b) to deal with inperfect systems, capable of 
recording in unpredictable ways, and (c) to m^uiage novel situations. 
A CGiKJluding section dlscussef* institutional issues in managing (and 
es^loiting) such research., relate efforts (or noeds) in other domains, 
and tho philosophy of science un^arl^'ing this analysis. 



SPACE STATION DECISIONS AND THLIR FACILITATION 

Ifost prescriptive schemes for deliberative decision making (Behn and 
Vai:pel, 1982; Raiffa 1968; von Winterfeldt and Edwards, 1986), showing 
how it should be dOi^, call for performing something like the following 
four steps: 

a. Identify all possible courses of action (including, perhaps, 
inaction) . 

b. Evaluate the attractiveness (or aversiveness) of the 
consequences that mi^t arise if each cr^vxse of action is 
adopted. 

c. Assess the likelihood of i^ach consequence occurring (should 
each action be taken) . 
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d. Integrate all these considerations, using a defensible 
(i*e*, rational) decision rule to select the best (i^e., 
optimal) action* 

Frm this perspective, decisions are evaluated according to how well 
they tafce advantage of vdiat was kncwn at the time that they were made, 
vis-a-vis achieving the decision maker's objectives* ihey are not 
evaluated according to the desirability of the consequences that 
followed. Sana decisions involve only imdesirable options, while the 
uncertainty surrounding other decisions means that bad things will 
happen to som good choices* 

The follo^ang is a partial list of decisions that mi^t arise in the 
course of designing and operating a space station. Each offers a set 
of action alternatives. Each involves a set of consequences \Aiose 
relative inportance must be weired. Each is surrounded by various 
xjncertainties whose resolution would facilitate identifying the optimal 
course of action: 

Decid^jig whether to override an automated system (or deciding 
what its current state actually is, given a set of indicators) ; 

Deciding in advance hew to respond to a potential emei:gency; 

Deciding where to look for some vital information in a 
cortputerized database; 

Deciding whether to proceed with an extravehicular operation 
when some noncritical, but desirable safety function is 
inoperative; 

Deciding whether to replace a crew member having a transient 
medical problem (either when formulating general operational 
rules or vSien applying them at the time of a launch) ; 

Deciding vSiere to put critical pieces of equipment; 

Deciding how to prioritize the projects of different clients, 
both in planning and in executing mission:^; 

Deciding vAvere to look first for the sources of apparent 
problems; 

Deciding which ground crew actions deserve an extra double 
check; 

Deciding vAiether the fli^t crew is iip to an additional period 
ixi oriDit; 

Deciding vdiat to do next in a novel manipulation task; 
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Deciding on the range of possible values for a parameter needed 
by a risk analysis of system reliabililY; 

Deciding just how much safety will be increased by a design 
change, relying on a risk analysis to project its system-wide 
ramifications; 

Deciding vdiat to report to outsiders (e.g., journalists, 
politicians, providers of corartiercial payloads) about conplex 
technical situations that they are ill-prepared to understand. 

These decisions vary in many ways: vAio is making them, how much 
time is available to make them, v.'hat possibilities there are for 
recovering frm m istakes, hov great are the consequences of success and 
failure, vAiat ccaipitational algorithms exist for deciding \jhat to do, 
hew bounded is the set of alternative actions, and vdier^ do the 
greatest uncertainties lie, in evaluating the inportance of the 
consequences or in evalviating the possibilities for achieving them. 
VJhat these decisions have in camrton is that some element of unaided 
human judgment is needed before an action is consummated, even if it is 
only the decision to allow an automated process to continue 
unmolested. Judgment is needed, in part, because there is some element 
of uniqueness in each decision, so that it cannot be resolved sinply by 
the identification of a procedural rule (or set of rules) that has 
proven itself siperior in past applications. The search for rules 
mi^t be considered an exercise in problem solving. By contrast, 
decision making involves the intellectual integration of diverse 
considerations, applying a general purpose integrative rule intended to 
deal with novel situations an:J "get it ri^t the first time." In 
"interesting" cases, decision making is conplicated by vmcertain facts 
(Wise, 1986) , so that one cannot be assured of the outcome (and of 
vMch choice is si:qperior) , and of conflicting consequences, so that no 
choice is si?)erior in all respects (and some tradeoffs must be 
made)^. 

As mention*^, the hope of behavioral decision theory is to discern 
basic p^cixw^^ical processes lik>ely to recur vdierever a particular 
kind of judgment is required. One hopes, for example, that people use 
their minds in some^fiiat similar ways ^Aien determining the probability 
that they ]<now vdiere a pi.ece of infonration is located in a database 
and idien determining the probability that they can tell vAien a 
ancmalous meter reading represents a false alarm. If so, then similar 
treatments mi^t facilitate performance in both settings (Fischhoff 
and MaoGregor, 1986; Murphy and Winkler, 1984) . 

The need to make decisions in the face of incomplete knowledge is 
part of the hxman condition. It becomes a human factors problem (the 
topic of this volume) either vdien the decisions involve the design and 
operation of machines (broadly defined) or vdien machines are intended 
to aid decisions. Decisions about machines mi^t be aided by 
collecting historical data regarding their performance, by having them 
provide diagnostic information about their current trustworthiness, by 
providing operators with training in how to evaluate trustworthiness 
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(and hew to cx>nvert those evcLLvations into action) , and by showing how 
to apply general organizational philosophies (e.g. , safety first) to 
specific operating situations. Decision aiding by machines m.ght be 
Improved by enhancing the display of information that operators 
understand most poorly, by formatting these displays in ways coitpatible 
with lasers' natural ways of thinking, by clarifying the rationale for 
the madiine's reccjtimendations (e.g., its assumed tradeoffs, its 
decision rule, its treatiiient of uncertainty) , and by describing the 
definitiveness of its reccanmendations. A better understanding of how 
people intuitively make decisions would facilitate attaining th Bse 
objectives, as well as developing training procedur^^ to help people 
make judgments and decisions vdierever they arise. Just thinking about 
decision making as a general phencanenon mi^t increase the motivation 
and c^^portunities for acquiring these skills. 



DEscRipnca^s of decision maklkg 

One way of reading the enpirical literature on intuitive processes of 
jvidgment and decision making is as a litany of problems. At each of 
the four stages of decision making given above, investigators have 
identified seemingly robust and deleterious biases: VJhen people 
generate action c5)tions, they often neglect alternatives that should be 
obvious arid, moreover, are insensitive to the magnitude of their 
neglect. As a result, options that should corainand attention are out of 
mind when they are out of sight, leaving people with the inpression 
that thee/ have analyzed problems more thorou^y than is actually the 
case (Fischhoff et al., 1978; Pitz et al., 1980). Those options that 
are noted are often defined quite vaguely, making it difficult to 
evaliaate them precisely, communicate them to others, follow them if 
they are adopted, or tell wheii circumstances have changed enough to 
justify rethinking the decision (Bentkover et al., 1985; Fischhoff et 
al., 1984; Furby and Fischhoff, 1987; Sanet, 1975). Inprecision also 
makes it difficult to evaluate decisions in the li^t of subsequent 
ejqperience, insofar as it is hard to reconstruct exactly \*)at one was 
trying to do and why. That reconstruction is further conplicated by 
hindsi^t bias, the tendency to exaggerate in hindsight vAiat one knew 
in foresi^t (Fischhoff, 1975) . The feeling that one knew all along 
vAiat was going to happen can lead one to be unduly harsh on past 
decisions (if it was relatively obvious v4iat was going to happen, then 
failure to select the best option must mean inconpetence) aM to be 
unduly optimistic about future decisions (by encouraging the feeling 
that things are generally well understood, even if th^ are not working 
out so well) . 

Even though evciluating the relative inportance of potential 
consequences mi^t seem to be the easiest of the four stages of 
decision making, a grcwing literature suggests that people are often 
uncertain about their own values. As a result, the values that they 
es^ress can be unstable and unduly sensitive to seemingly irrelevant 
features of hew evaluation questions are posed. For exairple, (a) the 
relative attractiveness of two gambles may depend on v^iether people are 
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asked how attractive each is or how much they would pay to play it 
(Grether and Plott, 1979; Slovic and Lichtenstein, 1983); (b) an 
insurance policy may beccme much less attractive v^en its "premim" is 
described as a "sure loss" (Hershey et al., 1982); (c) a risky venture 
may seem much more attractive v*ien described in terms of the lives that 
will be saved by it, rather than in terms of the lives that will be 
lost (Kahneman and Tversky, 1979; Tversky and Kahneman, 1981). Thus, 
uncertainty about values can pose as serious a problem to effective 
decision making as can uncertainty about facts. 

Althou^ people are often willing to acknowledge uncertainty about 
what will happen, they are not always well equipped to deal with it, in 
the sense of assessing the likelihood of future events (in the third 
stage of decision naking) . A rou<^ summary of the volxminous 
literature on this topic is that people are quite gooa at tracking 
repetitive aspects of their environment, but not as good at cxjiibining 
those observations with inferences about vdiat they have not seen 
(Hasher and Zacks, 1984; Kahneman et al., 1982; Peterson and Beach, 
1967) . Thus, they mi^t be able to tell how frequently tljey have seen 
or heard about deaths from a particular cause, but not be able to 
assess how r^resentative their ej^^erience has been—leading them to 
overestimate risks to vMch they have been overexposed (Coribs and 
Slovic, 1979; Tversky and Kahneman, 1973) . They can tell what usually 
happens in a particular situation and recognize how a specific instance 
is special, yet have difficulty integrating the^ two (uncertain) 
facts — with the most caramon bias being to focus on the specific 
informt,-.o,j and ignore ej^jerience (or "base rates") (Bar Hillel, 
1980) . 'Ihey can tell hew similar a specific instance is to a 
prototypical case, yet not how inportant similarity is for maVang 
predictions— usually relying on it too much (Bar Hillel, 1984; Kahneman 
and Tversky, 1972) . They can tell how many times they have seen an 
effect follow a potential cause, yet not infer what that says about 
causality— often perceiving relations vSiere none exist (Beyth-I-ferom, 
1982; Einhom and Hogarth, 1978; Shaklee and Tucker, 1980). Ihey have 
a rouc^i feeling for _v*ien they know more and vAien they know less, but 
not enou^ sensitivity to avoid a ccsnmonly observed tendency toward 
overconfidenco (Fischhoff, 1982; Wallsten and Budescu, 1983). 

According to decision theory, the final stage of decision making 
should involve inplementation of an expectation rule, v*iereby an option 
IS evaluated according to the attractiveness of its possible 
consequences, wei^ted by their probability of occurrence. Since it 
has beccsne acceptable to question the descriptive validity of this 
rule, much research has looked at how well it predicts behavior (Dawes, 
1979; Feather, 1982; Fischhoff et al., 1981; Kahneman et al., 1982; 
National Research Council, 1986; Schoemaker, 1983). A rough summary of 
this work would be that: (a) the expectation rulv?. often predicts 
people's choices fairly well— if one knows how they evaluate the 
probability and attractiveness of consequences; (b) with enou^ 
ingenuity, one can usually find some set of beliefs (rtaarding the 
consequences) for \Mch the riiLe would dictate choosing^the option that 
was selected— meaning that it is hard to prove that the rule was; not 
used; (c) e:qpectation rules can often predict the outcome of 
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decision-making procsesses even v^en th<=iy do not at all reflect the 
thou^t processes involved — so that prMicting behavior is not 
sufficient for understanding or aidiiig it; (d) those processes seem to 
rely on rtiles with quite different logics, msmy of vMch appear to be 
atterrpts to avoid ma3dng hard choices by finding some way to view the 
decision as an easy choice — for exaitple, by disregarding consequences 
on whicii the ot±ierwise-best option rates poorly (Janis and Mann, 1977; 
Mcjngoroery, 1983; Payne, 1982; Simon, 1957). 

Ihe significance of these results from ejqjerimental studies depends 
vpcani how well they repre«=5ent behavior outside the lab, how much insist 
they provide into inproving decision making, and how adversely the 
problems thac they reveal affect the optimality of decisions. As mi^t 
be expecteA, there is no sinple answer to any of these questions. Life 
poses a variety of decisions, some of vMch are sensitive to even 
modest inprecision in their formulation or in the estimation of their 
paraioeters, some of which yield an optimal drioice with almost ariy 
sensible procedure, and some of wMch can tolerate occasioned 
inaccuracies, but not recurrent problems, such as persistently 
exaggerating how much one Imows (Henrion, 1980; Krzysztofcwicz, 1983; 
IfcOormick, 1981; von WinterJeldt and Edwards, 1982) . Placing decisions 
within a grouqp or organizationcil context may ameliorate or exacerbate 
problems, depending on hew carefully members scrutinize one another's 
decisions, how independent are the perspectives that they bring to that 
scrutiny, and v^ether that social context has an incentive structure 
that rewards effective decision making (as opposed to rewarding those 
v^o posture or routinely affirm common misconceptions) (Davis, 1982; 
Lanir, 1982; Myers and Lamm, 1976). 

Ihe robustness of laboratory results is an empirical qaestion. 
^vhere evidence is available, it generally suggests that these 
jvttignental problems are more than e^^xarimental artifacts, vMch can be 
removed by such "routine" measures as encouraging people to work 
harder, raising the stakes contingent on their performance, clarifying 
instructions, varying the subject matter of the tasks used in 
ejqDeriments, or using better educated subjects. There are many fewer 
studies ttian one would likr regarding the judgmental performance of 
e55)erts working in their own areas of expertise. What studies there 
are suggest some reason for concern, indicating that experts think like 
everyone else, lanless they have had the conditions needed to acquire 
judgment as a learned skill (e.g., pronpt, unambiguous feedback) 
(Fischhoff, 1982; Henrion and Fischhoff, 1986; Murphy aixi Winkler, 
1984) . 

Ihe evidentiary record is also incairplete with regard to the 
practical usefulness of this research. The identification of common 
problems points to places vAiere human judgment should be supplanted or 
aided. The acceptance of decision aids (and aides) has, however, been 
som^pteit limited (Brown, 1970; Fischhoff, 1980; Henrion and Morgan, 
1985; von Winterfeldt aiid Edwards, 1986). One inherent obstacle is 
presenting usei^, with advice derived by inferential processes different 
than their natural ones, leaving uncertainty about hew far that advice 
is to be trusted ax)d ^ose problem it really is solving. Developing 
(and testing) decision aids that took seriously the enpirical results 
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Of behaviorcil decision theory would be a xiseful research project. With 
regard to situations vAiere decision aids are unavailable, there is some 
evidence that jxadgment can be inproved by training procedures that 
recognize the strengths and weaknesses of people's intuitive thou^t 
processes (Kahnanan et al., 1982; Nisbett et al., 1983). Here, too, 
further research is needed. 



IHE PSYCHOLOGICAL REALITY OF SPACE STATION DECISIONS 

The recurrent denend for siitdlar intellectual skills in diverse 
decisions means that any research into decision-inaJdLng processes could, 
in principle, provide some benefit to the space station program. 
However, there are some conditions that are particularl; ' iirportant in 
the space station environment and, indeed, mi^t rarely - ccur in less 
ccaciplex and technologically saturated ones. The challenges posed by 
such conditions VTOuld seem to be suitable and iirportant foci for 
NASA-supported research. Ihree such conditions are described in the 
iremainde r of this section. Each subsequent section considers research 
issues pertinent to one of these conditions. In each case, significant 
progress appears possible, but would appear to demand the sort of 
sustained programmatic effort that NASA has historically been capable 
of mustering. 



Condition 1: Ihe need to create a widely shared model of the space 
station and its support systems . The technical knowledge needed to 
manage the space program is widely distributed over diverse locations 
on ea2±h and in space, in different centers on earth, and across 
different people within each earth and space center. As a result, 
there are prodigious technical problems involved in ensuring 
conpatibility, consistency, and concurrency among the coitpiterized 
databases \jpon vMch these scattered individuals rely. Even if these 
problems of information transmission can be resolved, there is still no 
guarantee that the diverse individuals at the different nodes in the 
system will be aware of the information available to them, nor 
coitprehei^ its meaning for their tasks, nor be alert to all changes 
that mi^t affect their work. Even witJi a static database, there may 
be problems of understanding vAien the individualo have very different 
kinds of e)5)ertise, such that their contribut.\ons to the database 
cannot be readily xmderstood (or evaluated) by one another. 

The management of such systems requires the careation of some sort of 
system-wide model within vMch individuals can pool their knowledge and 
from vMch they can draw needed information. That 7x^odel may be a 
loc^ely organized database, with perhaps a routing s^^stem for bringing 
certain information to the attention of certain peop^^ (attempting to 
strike a balance between telling them too much and too little) . Or, it 
may be an explicit coordinated model, such as those used in design 
processes guided by procedures like prc±)abilistic risk analysis 
(Mccormick, 1981; U.S. Nuclear Regulatory Commission, 1983). Ihese 
models assign new information into an integrated picture of the 



ERLC 



243 



243 



physical s^rstem, possibly allcwing ccsipitational predic±ions of system 
performance,, \duch can be redone vAienever the state of the system (or 
the theoretical uncJerstanding of its operation) changes. Shared models 
with such cccputational abilities can be used to simulate the system, 
for the sake of cognparing the effects of design c±anges, training 
operators for emergencies, and troubleshooting (by seeing v4iat changes 
in the system could have produced the observed aberrations) . Such 
models are useful, if not essential, for achieving NASA's goal of 
allowing "crews to intervene at extremely lew levels of every subsystem 
to repair failures and take advantage of discoveries" (NPSA, 1986) . 

less ambitiais models include spreadsheets, status displays, even 
sinple engij ^ring drawings, pooling information from varied human and 
machine soui -es (althou^, ultimately, even machine-sourced information 
r^resents scsne humans' decisions regarding vSiat infontation should and 
can be summarized, transmitted, and displayed) . All such models are 
based around a scanevdiat artificial modeling "language" vMch is capable 
of representing certain aspects of osiplex systems. Using them 
effectively requires "fluerx^' in the mcxSeling languages and an 
understanding of their limits. Ihus, for exanple, decision analysis 
(Behn and Vax:5)el, 1982; Raiffa, 1968; von Winterfeldt and Edwards, 
1986) can offer insist into most decision-itaking prc±)lems, if decision 
makers can describe their situations in terms of options, consequences, 
tradeoffs, and probabilities — and if they can 3:ecognize how the problem 
described in the model differs from their actual problem. 
Probabilistic risk analyses can aid regulators and designers to 
xmderstand the reliabililY of nuclear power plants by pooling the 
knowledge of diverse groups of engineers aM operators — as long as 
everyone remembers that such models cannot capture phenomena such as 
the "intellectual common mode failiore" that arises when operators 
misunderstand an emergency situation in the same way. 

The creation, sharing, interpretation, and maintenance of such 
models are vital to those organizations that rely on them. The unique 
featui.es of such models in the context of NASA's missions are their 
size and cortplexity, their diversity (in terms of the kinds of 
e55)ertise that must be pooled) , and their formality. That formality 
comes not only from the technical nature of much of the information but 
also frcen the need for efficient telecarnmunicatd.ons among NASA's 
distributed centers. Formality ccorplicates the cognitive task of 
•:onmunication, by eliminating the informal cues that people rely \jpon 
to understand one another and one another's work. It may, however, 
siitplify tiie cognitive study of such comniunication by rendering a hi<^ 
portion of significant behavior readily observable. It may also 
siitplify the cognitive enaineering of more effective model building and 
sharing, insofar as better methods can be permanently and routinely 
incorporat:ed in the apprqpriat:e protxxx^ls. Researt±i that mi^t produce 
sucii methods is discussed below. 



Condition 2; The need to make decisions with imperfect systzems . 
Decisions involving uncertainty are gambles. Althouc^ it is an 
uncomfortable admission vAiere human lives are at stake, many critical 
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decisions in space travel are gaitibles. The lancertainties in them come 
from the limits of scientific Joiowledge regarding exactly how varioias 
elements of a mission will perform, frcan the limits of engineering 
knowledge regarding how different system elements will interact, frcan 
the limits in the technical capacity for modeling conoplex systems, and 
feom the xnpredictability of human operators (\Aio are capable v f 
fouling and saving situations in novel ways) . Indeed, despite NASA's 
deep cc3framitment to planning and training, the nature of its mission 
demands that some level of uncertainty be maintained. It is e^qpected 
to extend the limits of what peqpls and machines can do. iterformance 
at those limits cannot be tested fully in theoretical analyses and 
simulation exercises. 

In order to gamble well, one needs both the best possible 
predictions regarxJing a system's performance and a clear appraisal of 
the limits of those predictions. Such an assessment of residual 
uncertainty is needed in order to guide the collection of additional 
information, in order to guide preparation for surprises, and, most 
inportant of all, to guide the decision as to viiether a mission is safe 
enou^ to proceed (considering NASA's overall safety philosophy) . 
Using information wisely requires an understanding of just how good it 
is. 

Becaiase gambling is so distasteful, there is constant activity to 
collect (and produce) additional knowledge, either to perfect the 
system or to clarify its imperfections. As a result, the state of 
knowledge and the state of the system will be in constant flux, even 
without the continual changes of state associated with its ongoing 
operations (e.g., testing, training, wear). Somehow, this new 
information must be collated and disseminated, so that those concumed 
with the system know vdiat is happening and know how much one another 
knows. In this way, dealing with uncertainty is related to dealing 
with a shared model. 

For operators, this residual mcertainty creates the constant 
possibility of having to override the system, in order to rescue it 
from some xananticipated circumstance or response. That override might 
involve anything from a mile course correction to a fundamental 
intervention signalling deep distrust of a system that seems on the 
verge of disaster. As the physical stakes riding on the decision 
increase, so do the social stakes (in the sense of the responsibility 
being taken for system operation and the implicit challenge to system 
designers) . OJius, operators, as well as designers and managers, must 
be able to assess the system's trustworthiness and to translate that 
assessment into an appropriate decision. 

Ihe variety of iMividuals with knowledge that: could, conceivably, 
prtsrpt override decisions means that coping with uncertainty is an 
intellectual skill that ne^ to be cultivated and facilitated 
throu^iout the organization, it also n^ans that the system's overall 
management philosophy must recognize and direct that skill. For 
example, a general instruction to "avoid all errors" implies that tirt^ 
and price are unimportant* Where this is not the cases, personnel arB 
left adrift, forced to make tradeoffs without explicit cruidance. Such 
an official belief in the possibility of fault-free design may also 
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discourage the treatinant of those faults that do remain. Many failsafe 
systeans 'Hrork" only because the people in them have learned, by trial 
and error, to diagnose and respond to problems that are not si^^posed to 
happen. Because the esdstence of such unofficial intelligence has no 
place in the official design of the system, it nay have to be hidden, 
may be xmable to get needed resources (e.g. , for record keeping or 
realistic exercises) , and itay be destroyed by any change in the system 
that invalidates operators* understanding of its intricacies. From 
this perspective, where perfection is impossible it may be advisable to 
abandon near-perfection as a goal as well, so as to ensure that there 
are enou^ problems for pecple to learn hew to cope with them. 
Moreover, steps toward perfection should be very large before they 
could justi^ disn5)ting accustomed relationships. That is, 
technological instability can be a threat to system operation. 



Condition 3t The need to ira3<B novel decisions, in non-rcutine 
situations . With nearly perfect systems, rare problems are always 
somevdiat novel. Even when they have been anticipated Bind incorporated 
in contingency plans, there is always some XHicertainty about whether 
the problems that arise can be identified with the comparable problems 
described in the plans. Where the plans can be retrieved, there is 
still some XHicertainlY about viiether they will seem like the right 
thing to do once the contingency is confronted "in the flesh." The 
retrieval of plans is an exercicse in pattern matching. However, it 
also imolves a series of decisions regarding whether a contingency has 
arisen, whidi plan is meant to fit the current situation, and whether 
that plan is to be trusted. 

Yet other decision prc±)lems will be entirely novel axvi 
unanticipated. Such situations might be considered the purest fom of 
decision making, clearly calling for the integration of diverse piecej 
of information in an effort to identify the right course of action, 
often having to get it ric^t the first time. Where time constraints 
are great, such decision making may involve jiost the raw exercise of 
intuitive thought processes. Raw intuition may also be the primary 
ingredient for more leisurely decisions, when tnere is no accepted 
structure for decision making. That itay happen, for exanple, when 
problems fall at the intersection of seveiral jiorisdictions or when they 
require tradeoffs regarding vMch the organization lack?, policy. 

In such situations, decision making may be seen as involving several 
kinds of "research." These include xanderstanding the interactions 
among subsystems previously thought to be relatively independent, 
discerning hew the organization's xmderlying safety philosophy applies 
to a particular novel case, generating action options to evaluate, and 
ferreting shared misconceptions. 

When there is an algorithmic procedure for deciding vtet to do, the 
novelt/' of a decision may lie in having to deal with a \mique state of 
the physic^al system. Understanding that state requires more than the 
usual troubleshooting (i.e. diagnosing which of a known itet of problems 
has produced the observed syr^toms) . Rather th(3n that sort of 
(sophisticated) pattern matching, unique states require the equivalent 
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of on-line research. Ihat research nay involve short-term engineering 
analysis, using vdiatevar aspects of the overall design model can be 
accessed within the tiine constraints. When formal models are 
inaccessible, then the analysis ittust be performed within the "mental 
models" of the decision roaJcssrs and their aides. In either case, 
judgment is needed to choose the information-gathering procedures with 
the hi^iest "yield," in terms of hypothesis testing. 

In addition to the cognitive difficulties of making unique 
decisions, there may also be institutional difficulties to gaining 
si^port for unfamiliar actions based on interpretations of values and 
facts that are not e}5>licitly part of organization's shared model. 
Ihere not be the time needed for custcaanary consensus-building efforts. 
There may not bs clear recognition of the needed autonomy, ihere msy 
be unusual ei^xssure to being evaluated in the li^t of biased 
hindsi^t. Ihere may be problems in coordinating the activities of 
those involved in iitplementing the decision. TOiese difficulties affect 
the ability to anticipate the consequences of taking various actions, 
as well as decision makers' abiliiy to take those actions that seem 
ri^t to them. 



RESEARCH NEEDS: CREATING A SHARED MDDEL 

T3ie creation of e^qjlicit shared models demands several general 
intellectual skills. Each cxiuld be the source of problems and the 
object of research. Where procedures exist (or can be discovered) for 
enhancing those skills, there should be good opportunities to iitplement 
them widely (e.g. , in the coirputer programs used for eliciting and 
presentirg models) . Something is know about the exercise of each of 
the skills. if the same skills recur in the creation of many kinds 
of models, then learning .nore about them could provide seme generally 
loseful knowledae. Ihey are: 

Skill 1: identifying and characterizing the key ccatponents of 
the system being modeled. 

Skill 2: identifying and charavTterizing the interrelations 
between those catrponent^. 

Skill 3: estimating quantitative model parameters. 

Skill 4: evaluating- the quality of the model. 

In the case of a probabilistic risk analysis, exercise of the first 
skill would include cjetermining which pieces of physical equipment 
(e.g., valves, controls, piping) are vital to system perfonnance and 
describing them in sufficiently precise terms as to allow further 
analysis, 'ihs second skill includes determining which malfunctions in 
System X need to be considered vAien studying the perfonnance of System 
Y, and vSiat the functional form of their relationship is. Ihe third 
skill mi^t include determining the probable distribution of failure 
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rates for particular system cxairponents (e.g., valves, maintenance 
measures) . Hie fourth skill involves actions such as determining the 
range of values to be used in sensitivity analyses, assessing the 
information yield of possible research activities, and determining how 
well the system is understood (as a prologue to deciding whether it is 
understood well enou^ for action to proceed) • 

Creating such engineering models can be seen as a special case of 
the general problem of eliciting information from experts. It differs 
from the perspective associated mth vAiat are usually called "e>5)ert 
systems." Here, the modeling language does not atteitpt to be a natural 
one. Rather, it is a flexible analytic language, capable of modeling a 
wide varj^ety of situations and pooling the knowledge of diverse 
es^jerts — if they can e>qpress themselves in the terms of the language. 
Thus, the core of the needed researxh programme is an examination of 
how people express their beliefs in the therms of abstract languages, 
and how they interpret the expressions of others' beliefs in the models 
that they share. 

As with "expert systems,'' these models can help users understand 
(a3id communicate) the nature of their own expertise. Models force one 
to be explicit and allow one to simulate the effect of varying 
assurcptions on model perfonnance. Hcwever, if the language is awkward, 
X iitprecise, or inconsistently interpreted, then users may not know 
vdiat they are talking about. If the syntax is imirtuitive, then users 
may not understand the ij:rplications of the relations that they have 
described. In such cases, expertise couched in terms of true natural 
languages, with their deep dependence on tacit knowledge, may not 
ensure expertise with the modeling language. There even may be a role 
for interpreters, helping exqoerts express they know in terms that 
the language can accept. 

As a small excaitple of the possibility of such difficulties, 
(Fischhoff et al., 1978) two groups of eNperienced garage mechanics 
were asked judge the conpleteness of tree-like graphic depictions of 
possible reasons v*y a car mi^t not stop. One group judged a fairlv 
corrplete tree, the second a tree from vMch major systems (e.g., 
battery, ignition) had been pruned. Even thou^ the pruning removed 
systems judged to include approxdmately 50% of problems, the pruned 
tree was judged to be almost as corrplete as the full one. The (pruned) 
systems that were out of si^t were effectively out of mind. Althou^ 
these experts clearly knew about the missing systems, they had 
difficulty interpreting that knowledge in the terms of the model. 
Their expertise mi^t have been better exploited by having them list 
specific instances of no-starts, rather than asking for direct 
estimates of conpleteness. A second set of excanples lies in the 
research literatures documenting the difficulties that people have with 
testing hypotheses and discerning causal relations (Evans, 1982; 
Fischhoff and Beyth-Marom, 1983; Kahneman et al., 1982; Nisbett and 
Ross, 1980) . 

Understanding these properties of modeling languages is importan. to 
having realistic expectations from them. Iitpraving people's fluency 
with them is critical to inproving the quality of modeling and the 
ability of shared .odels to serve an organization's needs. From this 
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perspective, v*iat is needed, in effect, is an understanding of 
engineering design as a cognitive and social process, focused on these 
e>5)licit expressions of it. 

Every modeling language (liJce every other language, presumably) is 
better at capturing some kinds of situations than others. For example, 
iicst ergineering languages are ill-suited to describing the actions of 
humans within a technical system (Hollnagel et al., 1986; Rasmussen and 
Rouse, 1981) ; economic techniques, such as cost-benefit analysis, are 
ill-suited to treating goods that are not traded directly in an 
unrestrained martet; military intelligence analyses have more of a 
place for quantitative, tactical information (e.g., about \ghat the 
enemy has) than for qualitative, strategic information (e.g., about 
v^t the enerry really wants) . Such situations leave users with the 
difficult task of integrating two qualitatively different kinds of 
information, differing in how readily they can be incorporated in the 
model. Research is needed into how to extend the range of modeling 
languages, and into how to help users deal systematically with those 
factors that are left out. 

Once models have been created, they must be comrrunicated, raising 
the question of \Aio needs to know vdiat. Some balance must be struck 
between telling too much and too little. One researd:: approach to 
developing communication guidelines would come out of 
valuc-of -information analysis, asking v*iat information effects the 
greatest difference in the e55)ected value of the specific decisions 
that need to be made at different nodes (Raiffa, 1968) . A 
corrplementary, cognitive approach would consider how broad and deep a 
picture people need to see in order to understand the interface between 
their own actions and those taken elsei^ere. A third, more social 
approach would ask how people anticipate viiat others in the system 
knew, so as to be able to interpret their actions (Gardenier, 1976; 
Metcalf, 1986). 

After a model has been created, it must be vpdated, both as the 
system changes and as better information about it is received. 
Althou^ the natural desire is always to be current, that can create 
problems of understanding and coordination. For exanple, with an 
evolving system, design changes that are introduced piecemeal may have 
system-wide ramifications that are never detected. Or, users may find 
it difficult to deal with a picture of the system that is never the 
same as \Aien they last consulted it. Both of these kinds of problems 
mi^t be ameliorated by relying instead on periodic model-wide 
updating, at the price of letting the model become increasingly out of 
date as the last revision becomes more distant in time. Presumably, 
these "cognitive concurrency" problems, and their recommended 
treatments, will vary with the nature of the system and the changes. 

Better models (and better use of existing models) would directly 
produce some betuBr decisions, in those situations vliere action follows 
directly from the analysis of the facts. In other cases, the facts do 
not speak for themselves, but must be considered in the li^t of 
organizational policies, in such cases, there may be some place for 
decision aiding. The shared modeJ- could attenpt to identify relevant 
policies and extract their implications for particular decision 
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prdblems. To avoid the rejection that decision aids frequently have 
e>q)erienced, they would have to aid decisions without \asurping 
decision-inaldng responsibility. Hiat calls, in part, for cognitive 
research (e.g. , on how to display the assunptions and definitiveness of 
reccmnnendations) and, in part, for social research (e.g., on how to 
jvistify aided decisions) . 



RESEARCH NEEDS: USING IMEERFECT SYSTEMS 

The key to xasing iitperf ect systems is understanding their 
iirperfections. In part, that is a question of factual knowledge about 
prdDlems and their solxitions. In part, that is a question of 
appraising the limits to one's \aiderstandii>g of the system. That 
imderstanding is essential to being ready for surprises. 

As inentioned earlier, considerable research has examined people's 
ability to assess the liioits of their own lorKJerstanding (Wallsten and 
Budescu, 1983) . Typically, it has shown weak positive correlations 
between how confident individuals are in their own knowledge and how 
extensive that knowledge .is. Althouc^ individuals are more 
knowledgeable ^en they are more confident, the relationship in quite 
iitperfect. The most caramon overall tendency Is tcward overconfidence. 
Similar results have been observed in various settings, incliiding some 
involving ej^Derts making jxjdgments in their areas of e55)ertise (Henrion 
and Fischhoff, 1986; Hynes and Vanmarcke, 1976) and some involving 
people's assessment of their understanding of technical systems 
(Fischhoff and MacGregor, 1986) . 

Althou^ it could express itself as overconfidence in the 
reliability of a system, overconfidence in one's own landerstanding 
could also express itself in vindue readiness to override a system and 
assume personal control. This has, for example, been the experience 
with attempts to automate various kinds of clinical diagnosis (Dawes, 
1979) . It is, therefore, inportant to know how accurately the 
operators and designers of a system are able to assess the extent of 
their own landerstanding of its operations. If these assessments are 
inaccurate, then it becomes inportant to know vdiat cognitive processes 
are involved in assessing confidence (e.g., vdiat cues do operators 
attend to? how do they wei^ conflicting cues?) . These processes 
provide the points of ler/erage for inproving their self-ianderstanding 
(e.g., by training, restructuring information flows, formalizing the 
evaluation process) . 

One methodological obstacle to creating more realistic ej^jecptations 
is the difficulty of evaluating current e5q)ectations in operational 
settings. Some novel procedures are needed to extract expectations in 
a more or less online manner and then to compare them with actual 
system performance. It may be possible to meter performance in some 
way, or to create a "black box" that could be used to compare vdiat 
operators thou^t was happening with what was really happening 
(following successful operations, as well as following unsuccessful 
ones) . 
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Once the acxwracy of e^q^ectations has been assessed, it ittust be 
ccararamicated in ways that will appropriately shape operator (and 
designer) behavior, Reseaixh has shown that just telling people about 
a judgmental difficulty has little ef fecrt, without some instruction in 
how to think differently and in how to match abstract principles of 
thou^t and analysis to concrete problems (Fischhoff, 1982; Kahneman et 
al., 1982; Murphy and Winkler, 1984; Nisbett et al., 1983) • Further 
research is needed in this aspect of helping people to use their minds 
better* It mi^t inclx^de e>5)loration of alternative statistics for 
characterizirjg either the system or observers » understanding of it. 
Information about system reliability could come in the form of various 
siramary statistics, but also in the form of structural information that 
mi^t provide insist into the nature of problems as well as their 
magnitude* For exanple, it mi^t be helpful to know about unresolved 
tensions in ths design team, about the kinds of individuals (if axv/) 
\iho r^resented the perspectives of operators during the design 
process, about the number (or recency) of changes in design philosophy, 
about the state of the science underlying the design, and about the 
kind of external peer review to which the design was subjected* 
Whether such cues contain valid information is an analytical question. 
Whether that information can be used is an empirical behavioral 
question. 

Expectations are the product of applying general beliefs to specific 
situations, as they are revealed by a system's external indicators. 
Normally, designers do everythii^ possible to iitprove a system^ s 
trarifsparency, that is, the ciiances that its status and operation will 
be interpreted appropriately. Where transparency is less than 
ccatplete, however, qperators need to understand a system's 
iirperfections. Ihe degree to vMch a system facilitates that 
understanding mi^t be termed its metatransoarencv . In principle, 
transparency and metatransparency mi^t be quite independent. In 
practice, they mi^t even vary inversely. For example, summary 
presentations of current system status could facilitate getting a 
general feeling for the system, but obscure the raw observations that 
provide cues to the reliability of that summary. More generally, any 
refinement to a system can disn^ those finer points of its behavior 
that provide vital cues to judgments of its reliability. Ihus, 
designers mi^t consider \Aien operators would be better off with a 
system that is harder to read but has better understood quirks. lb 
avoid such tradeoffs, they ml^^t be helped by research into how to 
introduce inprovements without disnqptiiig qperators » local knowledge. 
Ihis question is analogous to the que£:' 'ons of how to iipdate models 
(discussed above) and how to avoid deskilling (discussed below) . 

One potential source of information regarding the limitations of a 
system is analysis of specific problems that it has had. Si^^erior 
methods for incident analysis would be useful in this regana. One 
problem facing those methods is having mixed and conflictiir; purrjses. 
Assigning blame, determining causality, and estimating the prx±^ubility 
of future mishaps are missions that call for somei^at different and 
incompatible procedures. A second problem is the effect of hindsi^t 
bias, vMch can distort observers* interpretations of past events and 
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even the memories of direct participants (Pew et al. , 1982) . _ A third 
ci)stacle to effective event analysis is ainbiguiiY in the definition of 
events. For exanple, if incidents are defined too narrowly, then the 
lessons learned may ensure that a particular event sequence will not 
recur, but give the feeling that a whole class of events has been 
treated. Here, too, research is needed into the cognitive processes 
conUibuting to these prctolems and the pror«dures for overccatdng them. 

If events are defined precisely, then they may be amenable to 
theoretical analysis of the optimal breadth (or level) of analysis. As 
the category of event being studied broadens, a wider set of evidence 
beoorass available, at the price of being able to reach less precise 
concliisions and reccsranendations.^ Ohere are other bdiavioral aspects 
of dealirg with Imp^ect systems that mi^t benefit from analytical 
work. One is evaluating the sensitiviiy of decision making to 
different kirds of ioiperfection in information (Henrion, 1980; 
Krzysztofowicz, 1983; McCormick, 1981; von Winterfeldt and Edwards, 
1982) . Another is seeing how uncertainty about different aspects of 
the system accumulate to an overall estimate of its reliabililY (e.g., 
do they cancel or airpliQr one another) Another is providing sctme 
insist into the asymptotic level of reliabiliiy possible with systems 
of different levels of canplexiiY (Perrow, 1984) . 

Ihe ultimate ei^ression of a lack of confidence is the decision to 
override a system over which the operator exercises st^jervisory 
control. It would be useful to have a fuller description of the 
override decision. What cues set it off? What steps are taken to 
confirm suspicions? How wide a set of system coitf^onents (or operator 
actions) is called into question? What is the residual core of solid 
beliefs about the system? What cues are interpreted as demonstrating 
the return of control? How does one override decision affect 
subsequent bshavior? In addition to descriptions of suoh decisions, 
one would want evaluations of their validiiy* Suoh evaluations mi^t 
be available in existing system performance statistics. Or, operators' 
concerns mi^t direct further research about the system. What 
operators do in the essentially novel situations created by a decision 
to override is the topic of the following section. 



RESEARCH NEEDS: MANAGING NON-ROUTINE SITOATIONS 

Any system concerned with irregularities that pose serious tt eats to 
life and property must prepare for contingencies. One standard method 
for doing so is by contingency planning: possible problems are 
anticipated; the best solution to each is identified; those solutions 
are then incorporated in the training of operators. If successful, 
suoh exercises will lead to the decision regarxiing the appropriate 
response being made well before ait^ contingency arises. Suoh 
deliberate decisions should benefit from the reduced time pressure, 
reduced (emotional) stress, and greater ability to recruit diverse 
experts (or even to conduct research) vMoh comes with planning. In_ 
this view, operators will be relieved of the need to make decisions in 
non-routine situations, by making those situations familiar in the form 



V 



257 



252 



of hypothetical e:q?eriences (even if those have yet to be experienced 
in realily) . Ihe decisions will be made by the contingency planners, 
leaving the operators to decide that some contingency has arisen and to 
decide vdiich one it is. Then, the correct plan is accessed and 
eifficuted. 

Oontingency planning requires a number of intellectual skills, each 
of vfliich could benefit frm studi' directed at ways to augment it. At 
the planning stage, these skills include the abiliiy to imagine 
contingencies at all, the abiliiy to elaborate their details 
sufficiently, the abiliiy to generate alternative responses for 
evaluation, the ability to evaluate those responses critically in the 
hypothetical mode, and the abi] ity to conmunicate the resultant 
dealsions to operators. At the execution stage, these skills include 
the ability for operators to diagnose their crisis situations in ways 
that allow them to access the correct plan. Failures at either of 
these stages may result in ineffective decisions or in operators 
wandering about the apprcpriateness of the decisions that they are 
required to iirplement. 

These problems are analogous to those facing effective emergency 
training in simulators, one worries, for exairple, that those who 
develop sijnulator exercises, teach the textbook responses, and evaluate 
operators' performance share some deep misconceptions about the 
system's operation— so that some critical contingencies are never 
considered. One also worries that spotting contingencies in the 
simulator mi^t be quite different from spotting them in reality, where 
the system may have a different operating history or different social 
setting, or vdiere operators are not as primed to ej5)ect problems (which 
t^ically come at enormously hi<^ rates in simulators) . Understanding 
how pecple perform the coirponent tasks in contingency planning mi^t 
help decrease the number of ncn-routine decisions that have to be made 
(by making contingency planniiig more effective) and help asfjess the 
need for making non-routine decisions (by assessing the limits of 
contingency planning) . 

Such understanding mi^t also help reduce the thre;=»t£; posed by undue 
reliance ai contingency planning. One such threat is taking too 
seriously designers' idealizations of the system. Si^ch models often 
provide a convenient basis for generating problens aiid exercises. They 
may even be used to run automated simulators. However, it is in the 
nature of models that they capture but a piece of realiiy, often 
without a clear (and comraunicated) understanding of just \A)at that 
piece excludes, m some cases, a model is actually made to do double 
duty, being up^ by designers to discover limitations of the system 
(leading to design changes) and by trainers as though it represented a 
stable, viable operating system. 

More generally., one needs to worry about how routine system 
operations affect operators' abiliiy to deal with non-routine 
situations. Inadvartently inculcating undue faith in a basic design 
that typically functions well would be one kind of interference, as 
would acting as thou^ contingency planning had routinized the 
treatment of novel situations. Institutional threats mi^t include 
failing to train for handling non-routine situations or failing to 
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reward those who naturally have the skills for doing so (assuming that 
such skills could be discerned) . The previous section suggested the 
possibililY that the continuous introduction of design iitproveinents or 
the polishirg of synthetic data di^lays itii^t disrvqpt operators ' 
ability to "read" the system's state and to diagnose novel situations, 

A general theoretical perspective for such research would be to 
consider the particular informational ecology in which judgment is 
acquired as a learned skill . Whenever that ecology changes, then there 
is scane need to refine or alter judgmental skills, and some threat of 
negative transfer. A variant on this threat is deskilling, v*iereby 
useful intellectual skills are allowed to wither or are neutralized by 
design features or changes. For exanple, as autatation increases, 
operators will increasingly be faced with near-perfect systems, vMch 
fail so seldcan that there is little opportunity to learn their 
idiosyncracies* The problems of getting operators "back in the loop" 
so that they can cope with non-routine decisions may require some 
reduction in autoatation and perfection. Ihe result of deautomation 
mi^t be an increased rate of errors overall, but a reduced rate of 
catastrophic ones (a result that would be hard to prove given the low 
rate of occurrence for catastrophes) . Research on these issues would 
seem hard and inportant. 

Whenever there is some significant ciiance that contingency planning 
will not do, some capabilil^ is needed for making decisions in real 
time, starting from a raw analysis of the situation (perhaps after 
going part of the way with an inappropriate contingency plan) • 
Training (and rewarding) the relevant intellectual skills (i,e,, basic 
decision-making abilities) would seem extremely iirportant. Much more 
needs to be known about how it can be done. For exairple, operators 
need to be able to generate good options regarding vfliat mic^t be 
happening and v4iat mi^t be done abc^ut it. Studies of creativity, in 
vogue some years ago, ostensibly e^ramined this question. However, they 
used rather siirple tasks and rather siitple criteria for evaluating 
colons (typically, the irore the better) . One potential aid to testing 
those options that are generated would be on-line, real-time system 
siimlators. These could help operators diagnose the situation that 
they see by simulating the situations that would arise from various 
possible initiating conditions. Ihey could also allow simulating the 
effects of various interventions. Getting such systems to work 
suggests some interesting coirputing ard interface design problems. 

A somevAiat different kind of aid would be base-rate information 
describing typical performance of the system (or ones like it) under 
particular conditions. That information mi^t describe, for exaitple, 
vdiat kinds of manipulations (in general) give one the best chance of 
being able to recover if they do not seem to be working, what 
manipulations provide the rx>st diagnostic information about their 
failings, \A)at are the best source.^ of information about current system 
status* Such statistical information mi^t prove a useful conplement 
to causal information about the system's interded operation. Its 
collection would represent an institutional commitment to learning from 
e^^jerience systematically. 
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It is often assumed that the choice of actions follows directly from 
diagnosing of the situation and anticipating of the effects of possible 
liiterventions. Hc^rever, eai decisions are contirgent on objectWes. 
Most organizations liave cottplex objectives, some admitted and some 
laplicit. Decision making can be paralyzed if the inplications of 
those general values cannot be extracted for particular situations. It 
can be disastrous if the interpretations are inapprxspriate. Here, too, 
a mixture of analytical and behavioral work may help to inprwe that 
application and anticipate misapplications. 

cmausioNS 

Resiaarch Management 

The topics described here were selected for their irrplications for the 
design and operation of equipment such as would be found in the space 
station and its si^port systems. Hiey are, however, described in terms 
of the general psychological processes that they involve. As a result 
ttey caild be pursued both as part of the development work for specific 
MftSA systems and as basic research issues examined in laboratory 
settings intended to represent low-fidelity simulations of the actual 
NASA environments. Similarly, NASA could contribute to concurrent 
research prompted by other systems that place similar intellectual 
demands on designers and cperators. Such connections would help to 
ensure the transfer of technology from NASA to the general communitv 
cxjncemed with ai-tcanaticm. 

Insofar as ttiis research deals with prcblems r^'evant to o^Jier 
technologically saturated environments, it should be able to learn fixm 
developments there, one relevant trend is the increasing scn'tiny that 
is being given to the quality of ej^jert judgment in technical systems. 
Some of that interest ccanes from within, out of ooncem for iinproving 
the engineering design process, other interest comes from outside, out 
of the efforts of critics v4io wish to raise the standard of 
accountability for technological prcblems. m the face of that 
criticism, expert judgment proves to be a particularly vulnerable 
target. Althou^ ther^ frequently great faith within a profession 
in the quality of it- judgments, there is not that much of a research 
base on which to base a defense (Feyerabend, 1975; Morgan et al., 1981; 
N^kin, 1984) . Such rese<irch '^fculd have considerable basic, applied 
and even political interest. apt'j.x'su, 

A^J^^ relevant trend is the introduction of computers into 
industrial settings. The creation of equipitent has alv^ys carried an 
implicit demand that it be comprehensible to its operators. However 
It was relatively easy for designers to allow a system to speak for ' 
itself as long as cperators came into dix-ect contact with it 
Ctjmputerization changes the game by requiring ei^licit sameiy and 
display of information (Hollnagel et al., 1986). That, in turn 
requires seme theory of the system and of the operator, in order to 
lmo»; viiat to show and how to shape the interface. That "theory" midit 
be created in an ad hoc fashion by the system's designers, or, there 



2G0 



255 



mi<^t be soaotve attenpt to involve designers with some e^qpertise in the 
behavior of operators, or even representatives of the operators 
themselves (even in places vAiere th^ do not have the hi^ status of, 
say, pilots) • A prejudice of this article, and other pieces written 
frm a human factors perspective, is that concern over operability 
should be raised from the very inc^)tion of a project's develcpnent* 
Only in that way is it possible to shape the entire design with 
operability as a primary concern, rather than as a tack-on, designed to 
rescue a design that has been driven by other concerns. As a result, 
raising these issues is particularly suited for a long-term development 
project, such as that concerning this working groap and volume. 



Hiilosophy 

A fundamental assuitption of this chapter is that much of life can be 
constrtied as involving decisions (i.e., the deliberate choice among 
alternatives, often with uncertain information and conflicting goals) . 
A corollary assuitf)tion is that the basic cognitive (or intellectual) 
skills involved in decision making have wide iitportance— if they can be 
understood and facilitated. 

Ihese are hard issues to stuc^. However, even if they cannot be 
resolved in short order, system performance mi^t be improved simply by 
drawing attention to them. A task analysis of vAiere such Jdlls arise 
can increase sensitivity to them, grant legitimacy to operators » 
conplaints regarding prriblems that they are ejq^eriencing, and encourage 
a folklore of design principles that mi^t serve as the basis for 
subsequent research. 

Ihe decision-making perspective described here is strongly 
cognitive, in part, because the decision theory from vMch it is drawn 
offers a widely applicable perspective and a well-defined set of 
a^ncepts. As a result, there is a relatively hi^ chance of re&xats 
rooted in this perspective being generally applicable. Moreover, there 
may be some some value to a general habit of characterizing 
decision-making situations as such. Within this context, there is 
still place to ask cibout issues such as the effects of stress, tension, 
conflict, fatigue, or space sickness on these higher-order cognitive 
processes (Wheeler and Janis, 1980) . 

This pearspective sees people as active in shaping their environment 
and their decision problems. It could be contrasted with an operation 
research-"b^ perspective in vdiich people are reduced to system 
components and behavioral research is reduced to estimating some 
performance parameters. Focusing on vdiat people do, rather than on the 
discrepancy between their performance and some ideal, increases the 
chances of identifying interventions that will help them to use their 
minds more effectively. 
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NOTES 

1. Tne chapters in this volvmve by Buchanan, Davis, Howell, 
Mitchell, and Newell provide other points of access to this 
literature. 

2. HiB relationship between prcjblem solving and decision making 
bears more discussion than is possible here, see National 
Research Council, 1986 for additional information. 

3. In this particular case, there seems to be such generality, 
unless ej^jerience provides the sort of feedback needed to 
acquire prc±)ability assessment as a learned skill. 

4. Fischhoff (in press) is an attenrot to provide access to this 
literature, ejqpressed in the context of the judgmental conroonent 
of risk analyses for hazardous teclmologies. 

5. Furby and Fischhoff (1986) discuss related is&ues in a very 
different context. 
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DISCUSSION: ISSUES IN DESIGN PC3R UNCERIAIMIY 



William C. Howell 



Eeviewii>g the presentations of Drs. Davis and Fischhoff , one wo^old be 
hard pressed to find critical omissions in the slate of issues set 
forth regarding human participation in the space station's 
judginent/decisioiyproblera-solving requirements, ihe problem facing the 
R&D team, like that facing the future operators of the system itself, 
is deciding vdiich of the plethora of options to address first — and to 
\Aiat depth — in the absence of coirplete knowledge. Agenda will have to 
be set, priorities established among research objectives (all of vdiich 
seem worthy) , aiid decisions made on vdien vinderstanding has reached a 
sufficient (albeit far from ideal) level to move on to either 
develcpnent or the next agenda item. 

Ihe present discussion, therefore, will focus on some of these 
prograimflatic considerations. It would, of course, be presurrptuous for 
anyone to prejvdge the relat'^ve merit of research programs yet to be 
proposed for a moving target such as the evolving space station 
concept, ifonetheless, current knowledge is sufficient to begin the 
process so long as it is with the clear understanding that frequent 
stock-taking and consequent reorientation will vindoubtedly be required 
as research findings accumulate, design decisions are made, and the 
entire system takes shape. Research never proceeds in as orderly a 
fashion as we anticipate in our plans and proposals because Mother 
Nature doesn't read them. One r<ever knows when she will choose to 
reveal some in^xDrtant secret that will divert the i^ole process! 

And finally, the discussion of priorities should in no way be 
construed as a call for serial research. The philosophy endorsed here 
is consistent with a theme that runs through the entire E^irposium: 
parallel research efforts must be carried out at various levels of 
specif icilY on a representative sanple of the total problem space if 
the program is to evolve — and continue to develop — in the most 
efficacious manner. The pressure to focus too narrowly on the most 
well-defined or immediate problems is al] too prevalent in undertakings 
of this magnitude having the level of public visibility that the space 
station enjoys. Maiv^r of the problems sure to arise "downstream" are in 
areas vftiere the present kncwledge base is at best primitive. Attention 
must be given new to expandir>g those ]aiowledge bases if we are to avoid 
costly delays in development and/or costly design mistakes as the total 
system takes shape. 
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Model Building 

Both presentations enphasize the inportance of developing a conceptual 
model or set of models of the space station. Itogether, Davis and 
Fischhof f sketch out the essential features of such modeling and the 
kinds of research questions that must be addressed in order to make it 
useful. I shall not repeat their c±)servations, except to note one 
point of contrast and to explain v4iy I believe model building deserves 
a top priority. 

First the contrast. Davis makes a distirction between aspects of 
the total system about vMch there is and is not sufficient information 
to construct models. Where it is deetned feasible, chiefly in the 
physical domain, the trick is to make the models— and the systems they 
represent--"resourceful" and ccsiprehensible. Where it is not, the 
issue becomes one of finding alternatives to modeling. Fischhoff , on 
the other hand, seems to have in mind a more conprehensive kind of 
modeling effort: one that anconpasses a variety of domains and levels 
of understanding. Here the eirphasis is on integrating vdiat we know 
even inconpletely, and providing a framewor]: i:pon which to build new 
understanding. 

Whichever concept one prefers, and I lean toward the latter, the 
research issues are largely the sane. Both call for eiqjloring new ways 
to capture and express properties of the system that will promote 
understanding across disciplines; both recognize that to do so requires 
a better grasp of certain cognitive functions than we now have. There 
are, in my view, at least four main reasons to enphasize a broad 
modeling effort (Meister, 1985) . 

First, the process of model building is the most ejqieditious way to 
organize our knowledge and ignorance, not only at the outset, but as 
the knowledge base grows and the system evolves. Assunptions, facts, 
parameter estimates, areas of uncertainty etc. can be clearly 
articulated; gaps that need to be filled, or estimates that need to be 
refined, can be identified. More than ar^rthing, a conceptual model can 
ensure that even the most pragmatic research has a better chance of 
contributing to the total effort. Taken literally, for example, the 
issues raised by Davis and Fischhoff cover virtually the entire domain 
of cognitive and social psychology. Were nature to take its course in 
these various research areas (or even were NASA sipport to accelerate 
the overall progress) , the odds of learning precisely what needs to be 
Jcnown at critical jvinctures in the space station's development are 
quite low. I shall have more to say on this point later. For present 
purposes, the argument is siitply that model building is a useful 
technique for keeping the research efforts at all levels of generality 
prcperly focused. One can study confidence in jiodgement, or 
interpersonal tension, or hypothesis generation, or hmui problem 
solving tendencies, or vtot eiqjerts know and do, or any of the other 
general issues identified by the presenters in ways that are mora or 
less likely to generalize to the space stacion situation. I see no 
irihercint reason v*iy an e:5)eriment designed to advance fundamental 
knowledge in one of these areas cannot be conducted in a space-station 
context as easily as in terms of weather forecasting, battle planning. 
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livestock judging, or business manageimait. A model is useful for 
specifying that context* 

A second reason that model building merits tb/a highest priority lies 
in its contribution to the ultimate development of tasks and 
procedures. Ihe ways in vAiich this contribution would manifest itself 
are well described in the two presentations* In essence it boils down 
to making reasoned design decisions frcm a system-wide perspective 
rather than from scawe parochial or purely traditional point of view~ba 
that an engineering, cortpiter science, cognitive, biomedical, or even a 
humanistic perspective* It forces early attention to such critical 
matters as develqping a common language and frame of reference within 
vMch the various specialists can function interactively, if there is 
one unique requirement for the successful achievement of this project's 
goal, it is that barriers to the exchange of information and 
intelligence among \anits-- -human-human, human-machine, 
machine-machine— be minin>ized. Systems of the past have generally had 
to attack such barriers a fter the fact because of the initial dominance 
of one or another technical specialty. And they have done so with only 
limited success. Here the opportunity exists to "design in" features 
that can minimize barriears. Model development encourages this kind of 
thiilking from the very outset — ^provided, of course, it is not entrusted 
to only one technical specialty! 

A third argument for the priority of model building is its c±fvious 
inportance for training, aiid possibly even personnel selection. True, 
a modal is not a simulation. Neverthelesss, simulation at some level 
of fidelity imist xiltimately be constructed just as it has been for 
training on all the earlier projects ii. the space program. To the 
extent that the model organizes vhat is known and unknown at a 
pairticular stage, it permits development of simulations that have a 
greater likelihood of providing training that will transfer positively 
to the operational tasks. Ihe kinds of uncertainties and 
unanticipated contingencies the human is apt to encounter in the opace 
station are more likely to arise in a simulator based on a 
corrprehensive modeling effort than they would be in a simulator 
designed tc* maximize purely technical fidelity. In the absence of a 
good conceptual model, the criterion of technical fidelity is almost 
certain to dorciinate. To use an extreme exanple, suppose the modeling 
effort identified a social pheiiomenon vftiose course of development 
extends over a period of months ax)d v*iose appearance dramatically 
alters the way certain kinds of decisions are handled. Naturally, this 
would argue for incorporating a several month duration requirement into 
the simulation even if the technical skills could be mastered in 
weeJ^s. Without this social-process kna/leage, the enphasis would 
almost certainly be on the face validity of the hardware and software 
conponents. In other words, conprehensive moiel development would 
increase the likelihood that any simulation would capture salient 
aspects of the operational tasks — even some that cannot be coirpletely 
anticipated and "programmed in." Simlarly, it would provide a better 
sanpling of the overall task domain and hence a more content-valid 
basis for setting personnel selection requirements. 
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In citing the virtues of model develcprent for simulation and 
training, we should never lose si^t of Fischhoff 's warning against the 
possibility of overeirphasizir^ the known to the excl\:ision of the 
tmkncwn. Training that develops in operators a depandence on routinas 
for handling antj.cipatable contingencies can be counterproductive when 
truly rK3vel ones arise. However, thou^tful construction of a inodel 
can help obviate this problem by ensuring that the unknown is properly 
recognized. Oie real danger lies not in the atteirpt to build the most 
cccplete conc^)tual models we can, but in the teirptation to build 
simulators that operate only within the domains vdiere our knowledge is 
most ccffiplete. 

Finally, model development encourages — indeed forces — ^the kind of 
interaction among specialists in tlie design phase that will have to 
occur among operational specialists if the program is to be a success. 
To mount a truly ooatprehenjsive modeling effort will demand creation of 
a shared language and knowledge base; the exercise will serve, in 
essence, as a case study in multidisciplinary coordination as well as 
the source of a design product. 

In a sense, all the other proposed research directions are subsumed 
xmder the objective of model development (or at least are directly 
related to it) . As Davis points out, const3cucting an appropriately 
"robust" and "transparent" model requires judicious selection of vAiich 
properties to include and ignore, arri at v*iat level of abstraction. 
How well that can be done is heavily dependent on our understanding of 
hvmian cognitive processes in relation to the physical properties of the 
system. And it is largely to this end that tie research suggested by 
Davis, Fischhoff , and indeed this entire conference is directed. 
Nevertheless, one can distinguish more narrowly defined issues, and 
some of these appear more promising or tractable at this point than 
others. Several that strike me as particularly deserving of a hi^ 
priority are establishment o£ institutional values, manual override and 
standby capabilities, and transfer of training issues. 



Establishing Institutional Values 

Fischhoff e^q^lains that a critical issue facing decision maimers in the 
operational system will be that of representing the organization's 
values in dealing with non-routine situations. One cannot anticipate 
all the circumstances that mi^t arise that would require human 
judgment, but it is possible to define the value parameters along vdiich 
those judgements would have to be made and the extent to which 
insitutional, cre^;, or individual valup systems would take precedence. 

Most decisions incorporate value and e^q^ectation considerations in 
one form or another (Huber, 1980; Keen^ and Raiffa, 1976) . There are 
a lot of ways to help c±>jectify or iiiprove the expectation element, but 
'values are inherently subjective, ihis is vdiy there are political 
systems, judicial systems, wars, and advertising agencies, lailess we 
can articulate the value system under vMch the decision maker is to 
operate — or at least the general pmcess by vMch s/he is to assign 
values-— s/he faces an iitpossible task* It is scmewihat akin to that 
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facing the medical ccaiiraunity in its allocation of scarce and costly 
life-saving resources (such as organ transplc^ts) to a much larger and 
multifaceted population of worthy recipients. Whose inte3rests take 
precedence, and hew are the value considerations to be weired? 

Hiis issue is not an easy one to address, in part because it gets to 
the heart of the inost sensitive, controversial, and politically charged 
aspects of any iitportant decision dcmain. We do not like to make 
e)q)licit the level of acceptable risk in air safety, nuclear power, or 
military confrontation (e.g. how many lives we are willing to sacrifice 
for scttOB larger good) . Hcwever, there is some iirplicit value system 
operatii^ in ar^r such decision, and researdi over the past decade has 
produced methodologies for helping to pin it down (Howard, 1975; Huber, 
1980/ Keeney and Raiffa, 1976; Slovic et al., 1980). Extension of 
these teaudques, and perhaps develcpnent of others, to provide a 
ccannm valine framework for crews and individuals to carry with them 
into space is essential if decision-makir^ is to be of acceptable 
quality. Indeed, withcait such a framework the concept of decision 
quality has no meaning. Ihe options are to face the issue squarely and 
develop a value framework in advance, or to leave it intentionally 
vague and ad hoc,, therefcy offsetting vdiatever progress ir> made toward 
iirproving decision quality throu^ enhancement of ejqpectatiion 
judgments. 

Urxlerstarding Override and Stand-by Capabilities 

Clearly an important set of research issues centers around the idea 
that human judgment represents the last line of defense against the 
unanticipated. The xiltijiate decision that some automated subsystem is 
malftonctioninj, or that some low probability or unclassifiable 
situation has arisen, and the skill to move quickly from a relatively 
passive to an active mcxie in response to it are critical elements of 
the human's role. 

Both presentations address override and standby skill issues albeit 
in slic^itly different ways. For Davis, they fall within the category 
of »»makii>g the best of the situation, " or isftiat to do vAien we have no 
model. He speculates on alternative strategies, and suggests that we 
need to explore them, but is deviously more concerned with "making the 
best situations—increasing the rdbastness and transparency of the 
system and its mcxiels. For Fischhoff , these issues epitomize a central 
dilemma in the v^ole development process — ^the tradeoff between using 
everything we knew for aiding and contingency planning purposes, and 
preparing people to deal with the truly unknown. He argues that 
designing tlie system to maximize aecision accuracy may not really be 
optimal vdien one considers the potential costs in human judgment 
facility. (Here, incidentally, is another instance vAiere the problem 
of establishing a unified value system beconves critical.) 

What strikes me as particularly urgent about research on these 
issues is that we know just enou^ to worry, but not enough to say how 
they should be handled. For exairple we know about overconfidence bias 
and can easily imagine its iirplications for crisis decision-making, but 
we are far from understanding all the task and individual-difference 
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parameters that govern its seriousness (Hammond et al,,1980; Howell and 
Kerkar, 1982) • And we know even less about constructs such as 
creativity in either the individual or group cor..-ext» Were we able to 
identify and insasure such individual traits, we mi^t include tliese 
measures in a personnel selection battery. And understanding crroup 
processes mi^t suggest ways to offset deviant individual tendencies, 
unfortunately, our present knowledge of groap decision making does not 
allw us to predict with much certainty hew groip judgments will 
coatpare with, individual ones (Huber, 1980; Retiz, 1977; Howell arxi 
Dipbqye, 1986) . 

Siinilarly, it is fair, y well established, as Fischhoff notes, that 
stand-by skills suffer from disuse as thz human spends more and nvore 
tiine "outside the loop" in a monitoring capacity. This is particularly 
true for cogni.tavely ccmplex and dynamic systems. But how does one 
"stay on top of things" v^en accive involvement becomes increasingly 
rare as more and more reliance is placed on automating decision 
functions? Is something as elaborate (and costly) as a totally 
redundant manual back-up ever justified siitply for the purpose of 
maintainirg stand-by capabilities? And even if that were done, would 
the human be able to maintain a serious involvement knowing the status 
of his or her role? One need only take a look at NORAD operators doing 
their "canned" training exercises to appreciate the significance of 
this point I Would some other form of involvement do as well? For what 
decision tasks should sane form of involvement be maintained? To 
answer questions such as these, more will need to be learned about 
stand-by capabilities in critical ta^sks of the sort that are likely to 
be automated or aided in vhe space station, Fischhoff 's presentation 
does an excellent job of identifying the key questions. 

Issues concerning the override function should be addressed early in 
the development process at a fairly basic level since more general 
knowledge is needed before it will be possible to articulate the most 
critical applied research questions. Stand-by skill maintenance, on 
the other hand, seems more appropriately addressed at an applied 
research level after it becomes clear vtot sorts of functions the hiMan 
would be asked to back \jp. 



Training for the Khown and the Unknown 

Issues of training and transfer are closely related to those of standby 
skill; in fact, the latter are real, y a subset of the former, Ihe 
purpose of training is to establish habitual ways of thinking and 
acting in certain situations that are likely to improve iiidividual or 
team performance \^enever those situations arise. So .long as one has 
at least scane idea of what kinds of situations mi^t develop, there is 
reason to hope that the rig^t habits mi^t be cultivared. But if one 
guesses wrong, or the situation domain changes, or the } abits that work 
well for the known situations turn out to be counterproductive for the 
unknown ones, c±fvious transfer problems arise. Since the unanticipated 
is by definition inaccessible for simulation or contingency t^lanning, 
those charged with training dBvelcpnent face the dilemma alluded to 
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earliert Too heavy ain erophasis on the known or suspected task eleitvents 
could develop habitr that prove disastrous v4ien something totally novel 
ooines along* On the other hand, training that ertphasizes the 
fle)dLbility of response necessary to deal with novel situations could 
unaerxtdne the potential advantages of habitual behavior. 

Advances have been made toward addressing this dilemma in recent 
researtii on fault diagnosis and problem solving (particularly in 
connection with corplex process control systems, e.g. Iforay, 1981; 
Rasmussen and Rouse, 1981) • Still, as Fischhoff notes, there are a lot 
of fundainental questions that remain to be investigated before we can 
even begin to conceptualize how training ou^t to be structured in a 
systems as advanced as the space station* Once again, we have here a 
set of pressing issues on vMch some headway has alreacty been made and 
research directions have been identified* For these reasons, I believe 
it merits a hi^ priority m the overall research scheme. 

To this point, my comments have focused exclusiv / on priority 
setting within the domain of research issues raised ny the two 
presenters* To summarize, I believe the modeling effort should be an 
initial and continuing erogfihasis-— a framework within vfliich many parallel 
streams of research activity can proceed coherently and purposefully. 
Of those more narrov;ly defined issues, I consider the matter of 
establishing institutional values or value assessment techniques as 
primary# followed closely by the need to clarify the override function, 
to find ways to maintain intellectual standby skills (or define an 
optimal level of automation) , and to train operators to deal with 
ch£aiging anrt xmanticipatable circumstances. 

Ihere are two other programmatic issues that I would like to comment 
on briefly ttiat wei"e not an e55)licit part of either paper: individual 
differences, and the age-old basic vs. applied research controversy. 



On Individual Differences 

Both presentations suggest quite correctly that our designs must be 
geared to typical behavior — of people in general, or potential 
operators, or "e:>q)erts". The assumption is that there ar^ 
commonalities in the way people approach particular decision problems, 
and our research shc>ald be directed toward vinderstanding them. I 
a^ree. But I contend there is another perspective that has been all 
but j gnored by decision theorists that mi^t also contribute to the 
effectiveness of future decision systems. On virtually any stai>da>xi 
laboratory problem, subjects will differ dramatically in both the 
quality of their performance, and the way they approach it. True, the 
majority — often the overwhelming majority--will display a particular 
bias, heuristic, or preference on cue. But even iji tlie most robust 
demonstrations of conservatism, or overconfidence, or 
r^resentativeness, or non-transitivity there will be some subjects v*io 
don't fall into the conceptual trap. What \,^e don't know, in any 
broader sense, is viiether these aberrations represent stable trait 
differences, and if so, what their structure mi^t be and how they 
mi^t be measured. There has been some work on risk aversion 
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(Atkinson, 1983; lopes, in press), infonnation-processing tendencies 
(Schroder et al., 1967), and decision-making "styles" (Howell and 
Dipboye, 1986) , but very little conpared to the vast literatures on 
typical behavior. 

I suspect, thou^ I can't really prove it, that individuals differ 
ccaisistently in their inclination to attend to, process, and integrate 
na-; information into their current judgments. Were this the case, it 
mi^t be useful to have scane iteans of indexing such tendencies. 
Speaking more generally, I believe research aimed at exploring the 
consistent differences in the way people approach decision problem is 
just as valid as — thou^ considerably more cuniberscane than— that 
concerned with similarities. It should be encouraged. 



On Basic and Applied Research Strategies 

At various places in the foregoing discussion I have suggested that 
certain issues mi^t be attacked at a more basic or more applied level 
given the state of our current knowledge and the demands of the design 
problem in that area. I should like to condvide my discussion with 
sane elaboration on this general strategic issue. 

If there is one limitation on our xanderstanding of jxadgment/decision 
processes, in my opinion, it is that of context specificity. Work on 
judgmental heuristics, diagnosis and opinion revision, choice 
anomalies, groip decision making, irdividual differences in jxadgment or 
declc'i.on, etc. eac±i has developed vising its own collection of preferred 
research tasks, strategies, and literatures (Hammond et al., 1980; 
Schrodar et al., 1967) . C3ansequently, it is not aliTays possible to 
judge hw far a particular principle will generalize or viiether some 
human tendency is likely to pose a serious threat to performance in a 
particular system. 

Nevertheless, as the two presentations have clearly demonstrated, 
these basic literaturru^ provide a rich source of hypotheses and leads 
for consideration in an evolving program such as the space station. 
The judgmental heuristics and resulting biases cited bj/ Fischhof f , for 
exairple, are indeed robust phenomena, principles to be reckoned with in 
shapirig the space station environment. However, despite their 
ubiquity, such modes of cognition are more prominent in some contexts 
and under some conditions than others-— a point enphasized by Hammond in 
his "cognitive continuum theory" (Schom, 1985) ; and the seriousness of 
the consequent "biases" depends to f^ame extent on one's definition of 
cptimality (Hammond, 1981; Hogarth, 1981; Schroder et al., 1967; 
Hiillips, 1984, Von Winterfeldt and Edwards, 1986). 

Consider the overconfidence bias. One implication of this well 
establish^ cognitive phenomenon is that decision makers would be 
likely to act in liaste anc3 believe unduly in the correctness of their 
action, a clearly dysftmctional tendency. Or is it? A common 
corrplaint in the literature on organizational management is that 
managers are all coo often reluctant to act vfaen they should (Peters 
and. Waterman, 1982) . Peidiaps overconfidence may serve to offset an 
equally dysfunctional bias toward inaction in this setting, similarly, 
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decisions must often be made xmder considerable uncertainty, axYi this 
will clearly be no less true of space station than of business or 
•Mlitary decisions. Hcwever, once a decision is made; albeit on the 
basis of vfliat objectively is only a 51% diana=i of success, is there not 
a certain practical utility in actually believing the odds are better 
than that? If, as often happens, the decision is not easily reversed, 
viiat is to be gained by second-guessing or "waffling", and is there not 
a potential for benefit throu^ the inspiration of conf i< ince in 
others? In some cases that alone can increase the "true* odds! Ihe 
point is, overconfidence, like other hurran cognitive tendencies, may 
have ftmctional as v;ell as dysfunctional inplicaticns when viewed in a 
particular contejct (Hamowond, 1981) ; axvi even then, its magnitude may be 
partly a function of that context. Ihus the more clearly we can 
envision the context, the more likely we will be to generate the ri^t 
research questions, and vihat that research adds to our basic 
xmderstanding of overconfidence or other such plienomena v/ill be no less 
valid than that done in other contexts. All judgment aixa decision 
resosarch is done in some context; generalization accrues via 
convergence of evidence over a variety of contexts. 

MEy basic roint is this. The space station offers a very 
legitimate— indeed, an unusually rich— real-world context within \Mch 
to explore a variety of "basic" axYi "applied" research questions 
concurrently. Properly coordinated, the cartibined effort holds 
considerable promise for advancing our understaxxJing of fundamental 
judgment/decision processes in part because of the shared context. 
Ihree considi ^rations would, I believe, proinotze such coordination. 

First, as noted earlier, some effort should be made to encourage 
basic researchers to consider salient features of the space station 
sitruation in the design of their laboratory tasks axvi e55)eriments. 
While it could be argued that putting any constraint at all on such 
work violaiies tlis spirit of "basic research, " I believe some 
concessions can be made in the intierest of increasing the external 
validity of findings without ccompromising the search for basic 
knowledge. Secondly, research of a strictly applied nature, addressing 
specific judgment/der sion issues that must be answered in the course 
of modeling, simulation, and laltimately design efforts, should prxx^eed 
in parallel v;ith the more basic endeavc^rs. In some cases, the question 
mi^t involve choice of a parameter value; in others, identification of 
how subjects approach a simulated space-station task. Necessarily, 
such research would be less programmatic, more responsive to immediate 
needs, and more narrcv/ly focused than the fundamental work. 

Finally, and most infortantly, NASA mur± do everything possible to 
ensure that the basic aM applied efforts are mutually interactive* As. 
hypotheses and generalizations are identified at the basic level they 
should be placed on the agenda of the applied program for t:est or 
refinement; as featnares are built into the evolving system concept, 
they should become salient considerations for the basic research 
effort; as questions of a fundamental nature arise in the course of the 
applied woi.., they should be incorporated into the basic research 
agenda. 
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This all soxords quite dbvioias and "old hat." Certainly it is the 
way DoD research programs, for exanple, are supposed to work (Meislier, 
1985) . I submit, hcwever, that no matter how trite the notion inay 
seem, having closely coupled research efforts at basic and applied 
levels must be more than j\ast an aspiration if the judgment/decision 
challenges of aie space station project are to be met successfully. It 
must be planned and built into the very fabric of the program. The 
fact that the space station must develop by its own research 
bootstraps, as it were, permits little slippage and wasted effort. Yet 
the state of our knowledge does not permit neglect of either basic or 
applied research domains. 

OSiere are, of course, a number of ways this coordination of basic 
and applied work mi^t be achieved ranging from centralized 
administrative control to large-scale projects that are targeted to 
particular sets of issues and. encortpass both basic and applied 
endeavors iinder one roof. I am not prepared to irecomtnend a strategy. 
Rather, I suggest only that the issua is an impoitant one, and one that 
deserves special attention at the very outset. Hew it is managed could 
spell the difference between enlightened and unenliyixt.ened evolution of 
the v^ole system regardless of how mch resouix^e is allocated to 
judgment/decision research. 
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SYITOBSIS OF GENERAL AUDIENCE DISCUSSION 



Most of the points raised during Session IV and the general discussion 
centered arcund two scaoa^dicit related issues; 

1. the gap between behavioral (heuristic) and traditional (rule based) 
^pproac±ies to decision making, and 

2. haw to deal with shortxxxnings in one or the other that detract from 
si^stem performance. 



Hie Gap Issue 

Ttie observation was made that there seem to be two ways of thinking 
about decision problems, each with its cwn philosofphy and research 
agenda, that are proceeding more or less independently. To some 
extent, it was pointed out, the two papers in the session hi^ili^t the 
differences between the two approaches. The question was viiether, and 
if so hew, they should be integrated or linked more closely. 

Two conflictii^ views were offered. One was that since the 
differences are deeply rooted in their respective traditions and 
cultures, the barriers will not be broken down easily, and the 
anticipated payoff for NASA would probably not jxistify the time and 
cost necessary to bring about an Integration. A number of other issues 
should take precedence over this one. Ihe opposing view was that the 
tivo approaches should be better integrated, probably can be if NASA 
puts the issue on its research agenda, and in fact is being attempted 
in a small way 'chrou^ research currently in progress in Fischhoff 's 
lab. 

Among the sugjertions for an integrative approach were the v^ole 
domain of fuzzy logic and the bounded rationality concept (e.g. 
defining general goals and then "fiddling with the model at the margin 
as in 'satisf icing*") . It was pointed out, hcwever, that in the 
context of ejqjert systems such approaches reduce Lo writing a lot of 
conditional rules over a large number of state ^iables. Thxis one 
cannot soramarize easily vAiat the system will do over the full range of 
decision problems. 
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i^lication^, Or Dealing With Shortconings 

Several options were suggested for minimizing the effect of 
suboptimalities in human judgment* Training, vMle not imiversall v 
effective in overccatting biases, has produced some notable successes 
(e.g. weat.*^ forecasters) . Ihe key may veil lie in the proper design 
of trainii^ programs (something that merits a continuing iresearch 
effort) . Increasing the trainee's sophistication in statistical 
concepts, however, ?s clearly of little help. 

Aiding in its various forms and with its inventory of existing 
models has its place but also has limitations. Multiattribute utility 
theory, decision analysis, etc. are useful for solving well defined 
prdblenis, but "bring no knowledge to the party." Often their logic is 
not transparent to the user and critical facl^rs may be omitted. Thus 
their output may not be satisfactory in either an absoliite sense or as 
perceived the user. When it conflicts with human intuition there is 
a problem, particularly if the himan doesn't vinderstand the logic. 
User acc^ance of even improved decisions becdnes problematic. 

One approach to dealing with these deficiencies in the aiding models 
was advccated by Davis: find out vdiat is missing and build it in. 
Intuition and creative thinking are not magic, tut rather, 
"urjdiscovered ratianalily." Research should try to expose that 
rationalilY (or reasoning) and apply it in creating more robust models, 
as well as mor2 transparent ones. To the extent that tne research 
succeeds, it should be incorporated into training as well as aiding 
applications, and the result could be better decisions and greater 
acceptance of those decisions by users (vdio would now be more likely to 
appreciate the logic) . 
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SESSION V 
TEIEERESENCE AND SUPERVISORY CONTROL 



2S3 



TEIEOPERATION, TELEPRESENCE, AND TELETOBOnCS : 
RESEARCH NEEDS FOR SPACE 



Thomas B. ShericJan 



INIEODQCriON 



The Need and the Dileinma 



One of the dramatic challenges posed by space is versatile inspection 
and manipulation remotely operated by man. Some people within and 
outside NASA would like to automate everything but cannot — ^because so 
mary tasks are urpredictable and therefore not doable by 
special-purpose or preprogrammable machines, or are one-of-a-kind such 
that dedicated autcanatic devices to do them are too costly in weight 
and dollars. So himian perception, planning and control are required. 
But to place man physically there is constrained by hazard and hi^ 
cost of life sapport. Remote inspection and manipulation by man, on 
the oilier hand, poses serious prdDlems of her getting sufficient 
sensory information and controlling with sufficient dexterity. 

Artificial sensing, intelligence and control can help. 
Unfortunately we have hardly begun to understand how to integrate human 
and artificial brancJs of sensing, cagnition and actuation. One thing 
is dear, however: to -^ast the problem in terms of hvmans versus 
robots is siirplistic, ur^productive and self-defeating. We should be 
concerned with how they can cooperate . 



Definitions 

Teleoperation is extension of a person's sensing and manipulating 
capabililY to a location remote frcm him. A teleoperator includes at 
the minimam artificial sensors, arms and hands, a vehicle for carrying 
these, and coraraunication channels to and from the human operator. 

Telepiv^ssence is the ideal of sensing sufficient information about 
the teleoperator and task, and communioating this to the himian operator 
in a sufficiently natural way that she feels herself to be physically 
present at the remote site. A more restrictive definition requires, in 
addition, that the teleoperator 's dexterity match that of the 
bare-handed himian operator. 
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Rdbotics IS the science and ait of performing, by means of an 
automatic appara-ois or device, functions ordinarily asc ibed to human 
beirgs, or operating with what appears to be almost human intelligence 
(adapted from Webster's 3rd Intl. Dictionary) . 

Telerobotics is a fom of telecperation in which a human operator 
acts as a si^pervisor, comraunicating to a computer information about 
task goals, constraints, plan^, contingencies, assunptions, suggestjons 
and orders, getting back information about acconplishments, 

concerns, and, as requested, raw sensory data-v^le. the 
subordinate telecperator executes ^Jie task based on information 
received from the human operator plus its own artificial sensing and 
intelligence. Accoitpanyirg the human si?)ervisor is a conputer Wch 
can communicate, integrate, assess, predict, and advise in 
human-friendly terms; at the site of the telerdbot is a computer vMch 
can comnunicate with the human-interactive coitputex and effect control 
using the artificial sensors and effectors in the most efficient way. 
One human-computer cconmand station can si^jervise many telerobots 

supervisory control in the present context is mostly synonymous with 
telerobotics, referring to the analogy of a human sipervisor diractL-? 
and monitoring the activities of a human subordinate. Si:5>ervisory 
oonteol does not n'2cessitate that the s-jbordinate person or machine be 
remote. 



Early History 

Prior to 1945 there were crude teleoperators for earth moving, 
construction and related tasks. About that time the first modem 

i^-^^ teleoperators were developed by Goertz at Argonra National 
labs. _ piese were mecharlcal pantograph mechanisms by which radioactive 
materials in a "hot cell" could be manipuD.ated by an operator outride 
the cell. Electrical and hydraulic servomechanisms soon replaced the 
direct mechanical tape and cable linkages (Goertz, 1354) , and closed 

was introduced, so that now the operator could be an 
arbitrary dist^ >ce away. Soon telemanipulators were being attached to 
submarines by the Navy and used ccramercially by offshore oil extraction 
and cable-laying firms to replace human divers, especially as 
operations got deeper. By the mid 50s technological developments in 
"telepresence" (they didn't call it that at the time) were being 
demonstrated (Mbsher, 1964; Johnsen and Corliss, 1967; Heer, 1973) 
Among these were: force reflection simultaneously in all six degrees 
of freedom; hands with multi- jointed fingers; coordinated two-arm 
te .operators; and head-mounted displays which drove the remote camera 
position and thereby produced r&rarkable visual telepresence. 

By 1965 e>periments in academic research laboratories had already 
revealed the problems of relemanipuiation and vehicle control through 
tajne delay (Ferrell, 1965) , and the early lunar teleoperator Surv-yor 
demonstrated the problems vividly in an actual space mission, itoudh 
sensing ard display research was already underway (Strickler, 1966) 
thou^ there was little interest in teletouch at that time. Soon 
thereafter supervisory control was shown to offer a ^-ay arxjund the time 
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delay problem, and also to have advantages even without tme delay in 
the cxsnmunication channel, vdiere, in order to avoid collision or 
dropping grasped objects, quicker teleoperator reaction tMve was needed 
than the distant human operator could provide (Ferrell and Sheridan, 
1967) • 

TTiou^ the NASA nuclear rocket project mounted a major effort in 
teleoperator development in the 1960s, after that program was cancelled 
and throu^out the 1970s there was little si:53port for space 
teleqperation or telerdbotics* By 1970, however, industrial robotics 
was coming into full swing, for Unimation, GE and a handful of other 
American, Japanese and Scandanavian manufacturers had begun using 
relatively siirple assembly-line robots, mostly for spot welding and 
pciint spraying* By 1980 industrial robots had became graced by wrist 
force sensing and primitive conputer vision, and push-button "teach 
pendant" control boxes were being vised for relatively siirple 
programming from the shop floor. 



Overview of Current Status 

To outward appearances six-degree-of-freedom, force-reflecting, 
sericil-link electrical or hydraulic master-slave manipulators have 
changed little in forty years* There are a few new and promising 
inechanical configurations of arms and milti-f ingered hands in 
laboratories, but as yet they are urproven in practical application. 
Video, driven by a demanding marketplace, is new of hi^ quality and 
miniaturized, and digitization and sinple recognition processing of 
video images is fast and ine5^)ensive. We have a variety of touch 
(surface contact and pressure array) sensors available in the 
laboratory, but as yet little understanding of hew to use these 
sensors. In teleqperation depth perception remains a serious problem, 
but there is promising research on several fronts. We still have not 
achieved fine, dexterous :elemanipulation with hi^ fidelity feedback 
as iirplied by the term "telepresence". 

As yet there is no satisfactory control theory of manipulation as an 
integrated sensory-motor control activitY/ but new theories have been 
developed for manipulation task-^analysis from an AI perspective, for 
kinematic-c^namic control of caiplex linkages, and for 
force-displacement hand-environmant inpedance. We still think of 
controlling manipulator arms and the vehicles vMch carry them as 
separate activities; we haven't learned to combine the two (thou;^ 
infants do it with ease) . We have demonstrated siirple 
human-si^jervised, or^puter^aided teleqperation in a number of ways, but 
our vmderstanding of human-conpater cooperation is very primitive, 
hardli commensurate with the label "telerdbot" we employ with such 
abandon. 
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SPECIFIC AREAS IN WHICH NEW RESEARCH IS NEEDED 

Research needs are discussed in four categories: (1) telesensing,- 
(2) teleactuating, (3) conoputer-aiding in si^^ervisory control, and (4) 
ineta-analysis of hiiinaiVccQT{:uter/telecperator/^^ interaction, some 
recent and current research is citM. 



Telesensing 

My colleague, Dr. Stark, who is an ^D and nore sense-able than I, will 
deal inore extensively with this category, particularly with vision, the 
nost luportant human sense, and with the needs and possibilities in 
virtual displays and controls, d^±h perception, and other significant 
needs in teleoperator research. 

I would like to comment about resolved force, touch, kinesthesis, 
prqprioception, and proximity— five critical teleoperator sensing needs 
\diich must be recognized as being different frcors one another. These 
five, together with vision, are essential to adiieve the ideal of 
"telepresense". For each it is iirportart to understand how the human 
normally functions, axxi then to understand !:cw the apprtpriate signals 
can be measured by artificial transducers and then displayed to the 
human operator and/or used by artificial intelligence in a way helpful 
to the human operator. 

Resolved force sensing is vtot the human body's joint, muscle and 
tendon receptors do to determine the net force and torque acting on the 
hand, i.e., the vector resultant of all the corponent forces and 
torques operating on the environment . In force reflecting inaster-slave 
systems this is laeasured either by: (1) strain gage bridges in the 
wrist (so-called wrist-force sensors) ; (2) position sensors in both 
master and slave, vftiidi, when carpared, indicate the relative 
deflection in she DOF (vMch in the static case correstx)i^ to force) ; 
(3) electrical itotor current or hydraulic actuator pressure 
differentials. Display of feedback to the operator can be 
strai^t forward in principal; in force-reflecting master-slave systems 
the measured force signals drive motors on the master arm \Mch pus.i 
back on the hand of tiie operator with the same forces and torques with 
which the slave pushes on the environment. Oliis mglit work perfectly 
in an ideal world where such slave-back-to-master force serving is 
perfect, and the master and slave arms itipose no mass, compliance, 
viscosity or static friction characteristics or ttieir own. Unhappily, 
not only does reality not conform to this dream it can also be said 
that we hardly understand \f^t are the deleters \is effects of these 
medianical properties in masking the sensory intormation that is sou<^t 
by the operator in performing telemanipulation, or how to minimize 
these effect- At least, thanks to ccrrputer coordinate transformation, 
it has been shown that master and slave need not have ttie same 
kinematics (Corker and Bejczy, 1985) . Force reflection can also be 
applied to a rate-control joystick (Lynch, 1972) but it is less clear 
\^^lat the advantages arB. 
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Ttoudi is the term used sloppily to refer to various forms of force 
sensing, but ncre precisely to refer to differential pressure sense of 
the skin, i.e., the ability of the skin to detect force patterns, with 
respect to displaceiWK t both tangential and normal to the skin surface, 
and to twB. The skin is a poor sensor of absolute magnitude of force 
normal to the surface and it adapts quickly. There are new a few 
in^iiruments for artificial teletouch; most of these have much coarser 
spatial resolxition than the skin, thou^ a few of the newer ones 
utilizii^ c^jtics have the potential for hi^ resolution (Harmon, 1982; 
Schneiter and Sheridan, 1984) . A major research problem for teletouch 
is how artificially sensed pressure patterns should be displayed to the 
human operator. One would like to display such information to the skin 
on the same hand that is operating the joystick or master arm vMch 
gtiides the remote manipulator. This has not been achieved 
successfully, and itost success has been with displaying remote tactile 
information to the eyes x;ising a coaiputer-graphic di.splay. or to skin at 
sam otiier location. 

Kinesthesis and proprioception are terms oficen used together, at 
least in part because the same rec^>tors in the human bocfy's muscles 
and tendons mediate both. Kinesthesis literally is the 3ense of motion 
ard prcprioception is awareness of where in space one's liitibs are. 
Telekinasthesis and teleprqprioception are particularly critical 
because., as telomanipulation experience has shewn, it is very easy for 
the operator to lose track of the relative position and orientation of 
the remc3te arms and hands and hew fast they are moving in vdiat 
direction. This is particularly aggravated by his having to observe 
the i^>ote manipulation throu^ video without peripheral vision or very 
good depth perception, or by not having master-slave position 
correspondence, i.e., when a joystick is vised. Potential remedies 
are: multiple views; wide field of view from a vantage point vMch 
includes the arm base; and ccQftpitej>^enerated images of various kinds 
(the latter will be discussed further below) . Providing better sense 
of depth is critical to telemanipulation in space. 

Proximity sensing is not something humans normally do except by 
vision, but cats do it by whiskers or olfaction (smell) , and bats and 
blind persons do it b;/ sound cues or vibrations felt on r-.B face. 
Sonar, of course, will not work in space. Electrtaonaqnetic and optical 
systems can be used for msvisuring proximity (close-in raTiging) to a^'oid 
obstacles or decide when to sla^ dcwn in approaching an object to be 
manipulated (Bejczy et al.980). Such auxiliary information can be^ 
displayed to the eyes by means of a conpater-graphic display, or, if 
the eyes are considered overloaded, by sound patterns, especially 
conpiter-generated speech. We need to vmderstand hew best to use such 
information in space. 

TETEACTUMTNG 

It was stated in the previous section that we knew relatively little 
about certain types of remote sensing, i.e., both artificial sensing 
aixi display to the himan operator controlling the teleoperator (this in 
spite of knowing a great deal about himan sensirg •^::r se) . Rei.ote 
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actuation (in vMch tents we include control in the conventional sense) 
poses an even larger prdalem, since it ccstibines motor actuation with 
sensing and decisicn-making, and it can be said V3 know even less about 
this, exc^ for the practical knowledge we have from operating the 
kinds of teleoperators that have been around for a number of years, 
mostly in nuclear hot-laboratories and for undersea oil operations. 
Again, ccamnents are offered in a nmtiber of specific categories v^ere 
sane research is ongoing but much nore needs to be done, ihe control 
prcblems in this categoiy, vdiere conpiter interaction p^ se is not the 
principal issue, apply to both direct and stpsrvisory control. 

Multi~deqree-of-freedam end-eff^^rs seem a mo&-t obvious need, as 
evidenced by our own human hands, but the sad fact is that these have 
not been developed beyond a few laboratory prototypes, commercial 
manipa).ators tend to have siaple parallel-jaw grippers, and a few have 
caaws, magnetic or air-suction gripping mechanisms, or special purpose 
attachraa^ devices for welding, paint spraying or other special-purpose 
tools. Thou^ parallel-jaw gripping seems the most obvious function 
for a one DOF end-effector, it is not yet dear vdiat a second DOF mi^t 

, . 5' °- ^ etc. Multi-fingered devices such as those by 

Salisbury (1986) or Jacobson (1987) will help us answer these 
qiiestions. At the moment fear of losing objects in space seems to 
militate against general purpose grippers; that could change in the 

ccaipiter-graphic workstations begin to offer the hope 
of stuping problems like these by conputer simulation without having 
to build expensive hardware for every configuration and geometric 
relationship to be tested. 

IVro-arm interaction is a necessity for much human manipulation (it 
has becane standard for nuclear hot-lab manipulators) , but we rarely 
see It in industrial or undersea teleoperators. Part of this problem 
IS to get the most out a given number of degrees-of-freedom. For 
ejQnple, instead of having a single six-axis arm operating on one body- 
relative to a second body (or base) , one mi^t accomplish the same by 
having a three DOF "grabber arm" position the bo;^ so that a second, 
say, three DOF arm can work in coordinated fashion to perform some 
assembly task. Industrial robot ej^ience shows that two three DOF 
arms are likely to be sinpler and cheaper that one six-DOF arm. This 
has not been implemented in space applications; the problem needs 
research. 

Redundant DOF Hand-arm-vehicle coordination is a serious problem, 
and actually a need for any kinematic linkage of more than six DOF 
vauch must be controlled in a coordinated way. This is largely an 
unsolved theoretical problem, at least in part because the number of 
configurations which satisfy given end-point position/orientation 
constraints is infinite. One tries to select from among these 
solutions to minimize energy or time or to avoid certain absolute 
petitions of the joints, or to prevent singularities, etc., but the 
mathematics is formidable. One arm of three and one of four DOF make 
for such redundancy, but perhaps even more important, so does a vehicle 
thrusting in six DOF with an attached arm of even one DOF. We huirans 
coordinate movements of our own legs, arms, and bodies (many redundant 
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DOF) without difficulty, but just how we do it is still a relatively 
well-kept secret of nature* 

Multi-person cooperative control is one way to control a conplex 
multi-DOF teleqperator— where each of several operators is responsible 
for maneuvering a single am or vehicle in relation to others. Is this 
best or is it better to have a single operator control all DOF of both 
vehicle and ana? We really don't know* Results from siirple tracking 
ejqperinents suggest that control of itiultiple independent tasks is very 
difficult for one person. When the degrees of freedom of a task are 
closely cocpled ai^or irtust be coordinated to achieve the task 
cbjectives, that can be relatively easy providec?. proper control means 
are providoi—but \jp to how many DOF? It is surprising hcM little 
research is available in this area* 

Adivistable impedance of master and/or slave is a prcsnising way of 
making a master^lave teleqperator more versatile than if the 
ccaipliance-viscosity-inertance parameters remained fixed (Raju, 1986) . 
A carpenter may carry and xose within one task several different 
hamiasrs, and a golfer many clubs, becaxose each provides an impedance 
characteristic appropriate for particular tasks \Mch are e5^)ected. 
Carrying many telec^^erators into space may be avoided by making the 
iiipedance between slave and task and/or between human and master be 
adjustable. We have hardly begun to vmderstand this problem, and have 
much to learn. 

Interchancreable end-effector tools is another way to accoitplish 
versatility, and of course is precisely \diat carpenters, surgeons or 
other craftsmen use. Future space teleoperators may have a great 
variety of special tools for both modifying and measuring the 
envirorfiaent. It is not clear how to make the trade between special and 
general purpose end-effectors. 

T ask-resolved manipulation means performing standard or 
pr^rogramnved operations (e.g., cleaning, inspecting, indexii>g a tool) 
relative to the surface of an environmental object (Yoerger, 1986) • 
Ttds means sensing that su2 ace in the process of manipulating and 
continually performing coordinate transformations to i:pdate the axes 
with respect to ^diich the operations are being done. !I3iis is an 
extension of end-point resolution — ability to command the finger to 
move in a desired trajectory without having to worry about hew to move 
all the joints in between. 

Force-feedbaCk with time delay has been shown both theoretically and 
experimentally not to work if the fon::e is fed back continuously to the 
same : and as is operating the cor 1, for the delayed feedback sijftply 
forces an instability on the process vMch the operator mi^t otherv/ise 
avoid by a itove-and-wait strategy or by supervisory control (Ferrell, 
1966) . Yet it seems that forces suddenly encountered or greater than a 
preset magnitude mi^t be fed back to that hand for a brief period, 
provided the forward gain were reduced or cut off during that same 
brief period, and the master then repositioned to \'foBxe it was at the 
start of the event with no force-feedback. 



290 



286 



Ocaipiter-aiding in Si.5)ervisory Control 

Computers may be used for relatively "low^level" oonpitations in 
many of the telesensing/display and teleactuation modes described 
above. There are a number of other teleqperation research probleos in 
vauch the human-ccsDoputer interaction ia the important part. Ihese 
iiKxLiJde ccHipiter simulation, cotpiter-based planning/decision-aidijig, 
and ocnpiter-aided ccanitancVcanmunicatiaiVcontrol in various mixes. All 
of these are part of si?)ervisory control by a human operator of a 
telerobot. 

Off-line, real-time, human-operable f'flyable") simulation of 
teleqperation for research, engineering or training has barely begun to 
be viable. Ihis is because of the conplexity of simulating and 
displaying the vehicle plus the arm and hand plus the manipulated 
object plus the environment, having all degrees of freedom operate, 
with removal of hidden lines, ard so on. Even nominally hi^-quality 
ccmpiteir-graiMcs machines have trouble with generation of such complex 
displays in real time. Wfe can come close today, but since coitputer 
power IS the one thing that is bouM to improve dramatically over the 
course of -die coming few years, we mi^t pay attention to the many 
possibilities for using computers as a substitute for building 
ej?)ensive hardware to perform man-machine ej^jeriments and evaluate new 
design configurations. Ihere are serious prcblems to simulate the full 
dynamics of multi DOF arms and hands. Ihere are problems to be solv<jd 
to make simulated teleqperators grasp and manipulate simulated 
objects. There are many prdslems to get hi^ quality pictures (in 
terms of resolution, frame rate, gray-scale, color, etc.) Ttelepreserce 
IS an Ideal m simulators just as it is in actuality. In fact, to 
enable the human operator to feel he is "there" \dien "there" exists 
rvMiece other than in the conputer poses a particularly interestina 
challenge. ^ 

On-Line in-situ plant> inq simulators might be vised "in the heat of 
battle" to try out maneuvers just before they are ccramitted for real 
action (and real ejqsenditure of precious resources in space) . In this 
case comma, is would be sent to the catpxter-based model of the vehicle 
and/or manir ilator and these would be observed by the operator 
prospective^ i.e., before further commands are given (as coitpared to 
the retrospec state estimation case to be described below) . 
Conmands (si^xervxt^ - or direct) would be given to the simulation model 
but not to the actual --ress, the model results would be observed, ard 
the process could be re^, i until the operator is satisfied that he 
Knows what commands are be-v. to ccanmit to the actual process. There 
are possibilities for having the simulator "tract" the movement of the 
actual process so that any on-line tests could start fran automatically 
updated initial conditions. The problem of ;*iat to control manually 
and vtot to have the computer execute by following supervisory 
instruction is something that cannot be solved in general but probably 
must be decided in each new context; the on-line planning simulator 
might be a way to make this hajpen. 

On-lin e simulation for time-delav comp enjation is ^ropriate only 
to direct control, and is not necessary for si5)ervisory control. Here 
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the cxaramanas are sent to the model and the actual system at the same 
tin^* Tlie laodel's prediction (e.g., in the form of a stick figure arm 
or vehicle) can be si^jerpc^ed on top of the actual video picture 
delayed in its return from space. Ihe operator can observe the results 
frcm the Dodel iinrasdiately (before the tiite delay runs its course) , 
thereby be mich more confident in his nove before stopping for 
feedback, and thus save several '»mave-and-wait" cycles. ^ Ihese 
techniques have been dejooistrated for models of the manipulator arm 
(Nqyes and Sheridan, 1984) , but not yet for the manipulator arm and 
controlled vehicle in ccsribination. VJhen the motion of vehicles or 
other objects not lander the operator's control can be predicted, e.g., 
by the operator indicating on each or several successive frames vdiere 
certain reference points are^ these objects can be added to the 
predictor display. With ai^ of these planning/prediction aids, the 
display can be presented fran any point of view relative to the 
manipulator/vehicle— a feat vMch is not possible with the actual video 
camera. 

State measureroent/estimation/displav has potential vdiere all 
information about vtot is going on "ri^t now*' is not available in 
convenient form, or vdiere neasurements are subject to bias or noise, or 
multiple measurements may conflict. Hie purpose is to provide a best 
estimate of the current situation or "s+'ate" (values of key variables 
\ghich indicate vghere the telemanipulator end effector is relative to 
reference coordinates or to environmental objects of interest, vftiat are 
the joint angles aiKi joint ar^le velocities, vdiat is the level of 
energy or other critical resources, and so on) and display this to the 
human operator in a way \Mch is meaningful and usable by him for 
purposes of control. This may msan combining information from multiple 
measurement or data-base sources, then debiasing this information to 
the extent that can be done (in li^t of available calibration data) , 
and factoring in prediction of v^t the state should be based on 
knowledge of \Aiat recent ii^juts were and ^diat are the likely system 
responses to these inputs. A corrplete state estimation yields a "best" 
probability density distribution over all system stat:es. Much theory 
is available on state estimation but tiiere has been almost no 
application to space telec5)eration. Some research has shown tiiat human 
qperatx>rs are i^nable to assimilate state information tliat is too 
corrplex, arxi t::erKi to simpli^ it for themselves by estimatii^g averages 
and throwing away the full distribution, or at least by using some 
sinple index of dispersion, or in the case of joint distributions over 
two or rtOTB variables by considering only the marginal distxibutions, 
or even siitplifyirg to point estimates on the independent variables 
(Roseborou^, 1986) . Research is needed on hew to provide the operator 
all that can be got from state estimation and hew to display this in a 
meaningful way. 

Si:^>ervisorY command lancaiaqes must be developed especially for space 
telec^)erators. We have a good start from industrial robot command 
languages (Paul, 1981) and from the few e5q)erimental si5)arvisory 
command languages which have been developed in the laboratory (Brooks, 
1979; Yoerger, 1982) . We muse understand better the relative roles of 
analogic instruction (positioning a control device in space, pointing, 
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demonstrating a mcverotait) and symbolic instruction (entering strings of 
alphanumeric symbols in more or less natural language to convey logic, 
description, contingencies, etc.). Clearly in tsveryday discourse we 
use both analoric and symbolic coding in ccatirnunicating with one 
another, especially in teaching craft skills, which seem to relate 
closely to vdiat telecperation is. Both corantunication modes must be 
vised in ocanrauiiicatiiig with a telercibot. Die telerdbot usually starts 
with little or no "context" about the world, vMch cOojects are which 
and vdiere they are in space. For this reason, it is necessary to toucSh 
objects with a designated reference point on the telepperator, to point 
with a laser beam or otherwl'se to identify objects (perhaps 
concurrently with giving names or reference information symbolically) , 
and to specify reference points on those objects. Recent progress in 
computer linguistics can contribute much to supervisory command 
language. 

Voice control and feedback^ for all the times it has been suggested 
as an interesting teleraanipulation research topic in recent years, has 
seen very littl*. systematic research. Voice ccanmand probably has the 
most prcsnise for giving "symbolic" ccanmands to the ccarputer (in 
contrast to the normal "analogic" or geometric Isamorphic commands 
v*iich the master-slave or jpysticik provides) . Vocal symbolic commands 
mi^t be used to reset certain autcmatic or sv^jervisory loofs such as 
grasp force, or to set control gain, master-slave aitplitude or force 
ratio, or to guide the pan, tilt and zoom of the video cameras fBeiczv 
et al., 1980) . \ J 2 

Aids for failure det ection/identification/emeraency restxjnse are 
particularly important since in a ccsiplex system the human operator may 
have great difficulty knowing v^en some ccatiponent has begun to fail. 
This can be because the conponent isn't being operated and hence there 
is no abnormal variable indicated. Alternatively, if it is being 
operated, the variables being presented as abnormal could have resulted 
from an abnormality well i^jstream. Finally, the operator can simply be 
overloaded. Many new failure detectioiydiagnosis techniques have been 
developed in recent years, seme of them involving Bayesian and other 
statistical inference, scare involving multiple ccarparisons of measured 
signals to on-line models of vAiat normal response should look like, and 
so on. Failure detectioiydiagnosis is a critical pa2± of stqpervisory 
control, v^ere the operator depends on help frm the cottputer, but 
himself plays ultimate judge. TMs may be a prime candidate for the 
use of ej^jerl: systems. 



Meta-analysis of Human/Coitputer/Teleoperator/Task Interaction 

Abstract theory of manipulation and mechanical tool-using has been 
surprisingly lacking. Control engineering, as it developed throurfi the 
1940-60 period, never really ccped with the coitplex sequential 
dependencies of coordinating sensory and motor activities to perform 
mechanical multi-DOF manipulation tasks. Only v^en industrial robot 
engineers began to face up to how little they knew about how to do 
assembly did the need for a theory of manipulation became evident. 
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Somehqw i.t seems reasoriable that the syntax of Tnanipulation is 
analogous to that of natural language (i.e., tool-action-<>bject 
corresponds to subject-verb-dbject, with appropriate modifiers for each 
term) , since both are primitive human behaviors* It then seems a small 
step to apply conpitational linguistics to Tianipulation. But little of 
this has, been done as yet* 

Performance measures and assessment technicaies need to be developed 
for taLec5)eration* At the moment there are essentially no accepted 
staxxaMxJs for asserting that one telemanipulator system (of hardware or 
software or both) is better or worse than some other. Of course to 
soms extent this is context dependent, and the success will depend i^n 
specific mission requirements. But there have got to be some generic 
BXYi cctamonly accepted indices of performance cavelqped vMch could be 
used to profile the capabilities of a teleoperator vehicle/manipulator 
system, incliiding factors of physical size, strength, speed, accuracy, 
r^)eatabili1y, versatility, reliability, etc. One worries \*iether even 
terms .such as accuracy, repeatability, linearity, and so on are losed in 
a cxaracon way within the community. No one is asking for rigid 
standarxiLzation, but some commonality across tests and measures appears 
necessary to avoid great waste and bureaucratic chaos. 

Diirect experimental comparisons between astronaut s ijerf ormincf 
hands-on in EVA and teleoperators, performing e ither in direct or 
supervisory-controlled fashion , must be done on a much more extensive 
ax^ scientifically controlled scale, making use of both the 
manipulation theory and the generic performance measures to be 
developed. Ihese e55)eriments should be performed first on the ground 
in laboratories or neutral buoyancy tanks, much as Akin (1987) has 
begun, then in space on shuttle flints (e.g., EASE e>?)eriments) , and 
eventually on the space station itself. 



OONCmSIONS 

A number of research topics have been proposed, all seen as critical 
for the development of needed teleqperator/telerdbotic capability for 
future space station and related missions. These have been presented 
in ttie areas of: (1) telesensing (with the longterm goal of 
tel^resence) ; (2) actuation (with the long term goals or versatility 
and dexterity) ; (3) conpater-aiding in si:5)ervisory cont:rol (with the 
long t:erm goals of providing bett:er simulation, planning and failure 
det:ection t^Dls, and t:elerdbots vMch are reliable and efficient in 
time ax^ energy) ; (4) met:a-theory of manipulation (with the long-t:erm 
goals of x^nderstanding, evaluation, axxi best relative use of both human 
and machine resources) . 

Telerdbotics, as much as any other research area for the space 
station, has direct research transferability t:o the non-government 
sector for use in manufacturing, construction, minirg, agricult:ure, 
medicine and other areas vAiich can improve our nation *s productivity. 
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TEIERDBOnCS FOR IHE EVOLVING SPACE STATION: 
RESEARCH NEEDS MD OUTSTANDING EE^DBIEMS 



Lawrence Stark 



INTRODUCnON 

Oie definition of telerdbotics (TR) has not yet stabilized nor made the 
standard English language dictionaiY. I tend to use telerobotics as 
meaning remote control of robots by a human operator losing supervisory 
and some direct control. Thus, this is an iitportant area for the NASA 
evolving space station. By robot, I mean a manipulator/mobility device 

visual or other senses. l do not name manipulators, as in many 
industrial autcsnation set-ips, robots even if they can be flexibly 
programmed; rather calling these programmable manipulators. Our own 
laboratory at the University of California, Berkeley, has been involved 
in problems in display of information to the human operator, in 
prctolems of control of remote manipulators by the human operator, and 
in ooramunication delays and band-width limitations as influencing both 
control and the display. A number of recent reviews have appeared with 
discussions of the history of telerdbotics beginning with nuclear 
plants and vinderseas oil rigs. 



IHREE SIMUIIEANEOrJS RESEARCH DIRECTIONS 

I believe that we should engage in triplicate or three way planninq. 
It IS important to carry out our research to acconplish tasks (i) uith 
man alone, if possible, such as in EVA (extravehicular activities) 
(11) with autonomous robots (AR) , and (iii) with telerobotics. By 
cowparing and contrasting the research necessary to carry out these 
three approaches, we may clarify our present problems. (See Table 1) 

Ihere are problems using man alone. The space environment is 
hazardous, it is very esqjensive to have a man in space; NASA must have 
quite adequate cost figures obtained from the demonstration projects 
that have already been accomplished with the shutUe program. We may 
also need a hi^er quality of performance than man alone can prwide in 
terms of strength, resistance to fatigue, vigilance, and in meetirig 
special problems. For example, if the space suit is not of constant 
volume under flexible changes of the limbs, then a great deal of 
strength is used up just in maintaining posture. 
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TABLE 1 Triplicate Planning 



Problems with man alone 

Hazardous environnvent: 

(space similar to nuclear plants, underseas) 
E)5)ensive (i.e. ETA in space) 
Need increased qualily in 

Strength 

Fatigue resistance 

Vigilance 

Performance 

Problems witlri Autonomous Robots 

Not yet available 
Etesign not fixed 
Feasibility not certain 
Reliability not tested 

Therefore: TR is a viable leading edge technology 

All three directions should be si:53ported for evolving space station 
planning, research, ajid develcpient. 



Problems with autoncanous robots lie in our not having mastered the 
technology to build them and have 'them perform satisfactorily. They 
are ryot yet available I Indeed, designs are not yet fixed and it is not 
certain hew feasible they will be, especially in terms of robustness 
and reliability. 

Therefore, we can see that telerobotics is a viable leading edge 
technology*. However, all three directions should be intensively 
puirsued iii research and development, especially for the next stages of 
the evolving space station planning. 



SPACE STATICaJ TASKS 

One of the major roles that NASA can play is to hypothesize taste for 
the evolving space station. In this way research regarding the design 
of telerobots to aocoitplish these tasks can be guided. For a list of 
seven groi:5)s of tasks see Table 2. 
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TABLE 2 NASA should Hypothesize TASKS f. r Evolving Space Station 



Housekeep j.ncf 

Life sij^rt systems 

Inventory control, access and storage 

Record teeing 

Garbage disposal 

Protection 

Frm space garbage 
From meteorites 
From traffic flow 

Maintenance 

Satellite 
Vehicles 

Space station itself 
Construcfcion 

Additional space station structures 
Manufacturing 

Crystal growth, biopharmaceuticals 
Mobility 

Automatic piloting 
Navigation 
Path planning 

Scientific 

landsat type linage processing for agriculture 

Meteorology 

Astronomy 

Human factors research 
Scientific record keeping 



As I will consider later, it is important to distinguish between 
those tasks unique to the NASVevolving Space Station and those with 
"industrial drivers" that will accomplish development of new 
technologies in hopefully a siperior fashion and thus enable 
conservation of limited NASA resources. 
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ERDBIEMS IN TEtERDBOTICS 

First I overview problems in telerobotics: Uiuse ooncemirjg displays, 
vision and other senses (Table 3) and those dea],ing with control and 
ccaranunication ('Table 4) . 

In eac±i table, I start with basic properties of the h\ri\an operator 
ani end \jp with planned capabilities oZ autonomous robots. In between, 
I try to cover vdiat kncwledge exists new in our field of telerobotics. 



E>qperimental Set-Up for Three-Axis Pick-and Place Tasks 

A telecperation stimulator constructed wiJi a display, jcystidcs, and a 
ccaiputer enabled three-axis pick-and-place tasks to be performed and 
various display and control conditions evaluated (Figure 1) . A vector 
display system (Hewlett-Packard 1345A) was used for fast vector drawing 
and i^xJating with hi^ resolution. In our e^^jeriinents, displacement 
joysticks were mainly used, althou^ in one ej^^erment a force joystick 
was used to ccapfpare with a displacement joystick. An ISI-11/23 
ccctpater with the KT-ll operating system conpiter was connected to the 
joystick outputs throu^ 12-bit A/D converters, and to the vector 
display system throu^ a 16-bit parallel I/O port. 



TABLE 3 Display Problems for the Human Operator 



Display grafiiics (raster/vector) 
On-the-screen enhancements 
Qn-the-scene enhan aai^ts 
Other series displayed 
Inputs to otlier senses 

Perspective and Stereo Displays 
Task performance criteria 

Helmet Mounted Display 

Telepresence; space constancy 

Human Operator (H.O.) Perfonnance 
Fatigue, effort, vigilance 

Robotic vision 
LLV - C3rLps 

MLV - blockworld and hidden lines 
HLV - ICM, AI 
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TABLE 4 Control and Canrntunication Problems for the Human Operator 



Basic properties of HcO,, especially for EVA task performance 
Nerve, muscle, AG/M? itodel 
Sanpled-data (SD) and adaptive control 
Prediction, preview, optimal control— Kalman filter 

H*0* control of vehicles, manual control 

H.O. control of TR 

H.O. special control: 

Preview, delay, bilateiral, homeamorphic control 

Ixxxsmotion (human, robotic) : 
Navigation— pathways 
Potential field algorithms 

HL2 (hi^ level control) : 
Si:5)ervisory control 

Multiperson cooperative control; RC3CL; fuzzy sets 

Autonomous robotic (AR) control 

Sensory feedbacdc, adaptive control, AI 



A typical presentation on the display screen for three-axis 
picdc-and-place tasks included a cylindrical manipulator, objects to 
picdc up, and boxes in vMch to place them, all displayed in perspective 
(Figure 2) • Since perspective projection alone is not sufficient to 
present three-dimensional information on the two-dimensional screen, a 
grid representing a horizontal base plane and references lines 
indicating vertical separations from the base plane are also presented 
(Ellis et al*, 1985; Kim et al., 1985 submitted). The human operator 
controlled the manipulator on the display using two joysticks to pick 
up each object with the manipulator gripper and place it in the 
corresponding box* One hand, using two axes of one joystick, controls 
the gripper position for the two c^es parallel to the horizontal base 
plane (grid) . The other hand, using one axis of the other joystick, 
controls the gripper position for the third axis (vertical height) 
perpendicular to the base plane. Picking up an object is accomplished 
by touching an object with the manipulator gripper. Likewise, placing 
an object is acconplished by touching the correct box with the 
manipulator gripper. 
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FIGDEE 1 Esqoeriinental arrangement. 



Puita Arm Siraulator 

In addition to the cylindrical manipulator simulation, the kinematics 
and ^oiamics of a six degree-of-freedcm Puma robot arm were simulated. 
Each of these degrees of freedom were controlled simultaneously using 
two joysticks. Althou^ no e55)eriments have yet been performed with 
the puma simulation, it is hoped that it will be a step toward 
e:5)eriirents with more coaiplex manipulators. A low-bandwidth telephone 
connection to control two Puma arms at Jet Propulsion Labs in Pasadena 
is planned. Ihe simulation will allcw prediction of the robots • motion 
to provide a preview display to help overcome the communication delays 
inherent in such a 1cm bandwidth connection, or as in transmissions to 
manipulators in space. 
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FIGURE 2 Ames-Berkeley visual enhancement display. 



Helmet Mounted Display Design 



Motivation 

The motivation of the HMD system is to provide the human operator with 
a telepresence feeling that he is actually in the remote site and 
controls the telemanipulator diirectly. Ihe HMD system detects the 
human operator's head motion, and controls the remote stereo camera 
accordingly. In our current system, the iremote telemanipulation task 
environment is simulated ax)d the pictuires for the display are generated 
by the corrputer. 



Head Orientation Sensors 

A two-axis magnetic Helniholtz coil arrangement was used as a head 
orientation sensing device, to detect horizontal and vertical head 
rotations (Figure 3) • By assuming that the pan axxi tilt angles of a 
remote stei^ camera are controlled in accordance with the horizontal 
and vertical head rotations, respectively, the conputer generates the 
corresponding stereo picture for the HMD. The head orientation sensing 
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FIGURE 3 Head orientation sensor device. 



device is conposed of a secircih (sensing) coil mounted on or beneath the 
helmet and two pairs of field coils fixed with respect to the human 
operator's control station. The ri^t-left pair of the field coil 
generates the horizontal magnetic fliK of a 50 KHz square wave. The 
vp^cMTi pair of the field coil generates the vertical magnetic flux of 
a 75 KHz square wave. The search coil detects the induced magnetic 
flux, vMch is anplified and separated into 50 and 75 KHz corrponents. 
The magnitude of each frequency ccarrponent depends vpon the orientation 
of the search coil with respect to the corresponding field coil (EXiffy, 
1985) . 
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I£D Display 

An early configuration of the HMD had a flat-panel ICD (liquid crystal 
display) screen (a canmercially a\'ailable portable LCD television) 
mounted on the helmet: for the display (Figure 4) . However, the picture 
quality of the ICD screen was poor due not only to lav resolution but 
also to poor contrast. 



CRT Display 

A new design of the HMD that we currently have, HKXinted a pair of Sony 
viewfiniers (Model VF-208) on the helinet (Figure 5) . Each viewfinder 
has a l-iiKh CRT (cathode ray tube) screen and a converging lense 
throu^ vdiich the human operator views the CRT screen. Ihe 
conputer-generated stereo picture pciir (stereogram) is displayed on the 
CRT screens; one for the left eye and the other for the ri^t. The 
converging lens forms the virtual mage of the stereogram behind the 
actual display screen. When the CE?r screen is 4.2 cm apart from the 
lens vdiose focal length is 5 cm, the virtual image of the CRT screen is 
formed at 25 cm apart from the lens with an image magnification of 6. 
Thus, a 1-inch CRT screen appears to be a 6-inch screen to the viewer. 
At appropriate geometrical and optical conditions, the ri^t and left 
images overlay, and most people can fuse the two images into a single 
three-dimensional image. The stereoscopic display fomtulas used to 
generate the stereogram for the helmet mounted display are described in 
references (Kim et al. , 1987) . 



LIGHT SOURCE 



SUPPORT 




LCD 

DISPLAY 



FIGURE 4: Early HMD design with LCD screen. 
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EEGtlRE 5 CXirrent HMD design. 



Mechanical Design 

Five degrees of freedom were provided for the mechanical adjustment of 
the position and orientation of each viewfinder, allowing three 
orthogonal slidings and two rotations (Figure 5) . A l lb. 
counterwei^t was attached to the bade of the helmet for 
counter-balancing. 

Communication Delay and Preview 

Oornraunication delay is a significant constraint in human performance in 
controlling a remote manipulator. It has been shown (Sheridan et al, 
1964, Sheridan, 1966; Tomizuka and Whitney, 1976) that preview 
information can be i:ised to iirprove performance, stark et al. (1987) 
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demonstrated that preview can significantly reduce error in tracking 
e}?)eriments vdth iirposed delay. 

E}5)eriraents were perf onned to investigate v4iether a preview display 
could ittprove performance in pick-and-place tasks with delay. A single 
bri^t diamorKi-shaped cursor was added to the display to r-epresent 
current joystick position. Uns was a perfect prediction of v*iat the 
end effector position would be after the delay interval. Thus, the 
task was the same as if there were no delay, except that the H.o. had 
to wait one delay period for confirmation that a target had been 
touched or correctly placed (in the non-previewed display, the target 
letter was doubled v4ien picked xjp, and became single again vAien placed 
in the correct box) . 

Preview ittproved performance at delays v?) to 4 seconds so that it 
was almost as good as for a small delay of 0.2 seconds (Figure 6) . 
While task ccsrpletion time in the delayed condition increased greatly 
vdth delay, there was only a small increase in ttie preview case. Ihis 
is because the H.O. must conpensate for delays by using a 
'»move-and-wait" strategy, making a joystick movement and waiting to see 
the resultant and effector movement. In the preview case, this 
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strategy is only necessary \^en very close to the target or box to wait 
for confirmation that the goal has indeed been touched. 



Control Mode Experiments 

Position and rate controls are vha two comrnon mnual control inodes for 
controlling telemanipulators with joysticks (or hand controllers) 
(Jcihnsen and Corliss, 1971; Heer. 1973) . In the position control the 
joystick command indicates the desired end effector position of the 
manipulator, v^ereas in the rate control the joystick command indicates 
the desired end effector velocity. 

In our thres-axis pick-and-place tasks, the human operator controls 
the manipulator hand position in the robot base Cartesian coorxiLnate by 
using three axes of the two displacement joysticks. In pure (or ideal) 
position control, the system transfer function from the joystick 
displacen^nt input to the actual manipulator hand position output is a 
constant gain for each axis. In pure rate control, the system 
transfer function is a single integrator G^/s for each axis. In the 
rate control, a 5% dead-band nonlinearity is introduced before the pure 
integrator in order to inhibit the drift problem associated with the 
pure integrator. 



Conparison of Pure Position and Rate Controls 

Three-axis pick-and-place tasks were performed with both pure position 
and rate control modes for various gains (Fi.gure 7) . The mean 
coitpletion time plot clearly shows that pick-aM-place perfonnance with 
pure position control (mean canopletion time 2.8 seconds at G=2) was 
about 1.5 times faster than that of the pure rate control {man 
completion time 4.3 seconds at G^==4) . 



Trajectories of Joystick and Manipulator Ifovements 

In order to examine vAiy the position control perfonned better than the 
rate control, several trajectories of the joystick displacement irpit 
and the manipulator hand position output during the pick-and-place 
operation were observed. Typical trajectories from the start of trying 
to pick \jp an object to its accorrplishment were plotted to illiastrate 
position, rate, and acceleration controls (Figure 8) . Conponents only 
for the X-axis (side-to-side) are plotted, since conponents for the 
other two axes are similar. Observation of several trajectories 
indicates that a precise re-positioning of the manipulator hand is 
achieved by a combination of quick step re-positioning operations and 
slow smooth movQiient operations* In position control one quick step 
re-positioning of the manipulator hand from one position to another 
requires one joystick pull or push operation, vAiei^as in the rate 
control it requires a pair of operations; pull-and-push or 
push-and-pull operations (Figure 8) • This is a major reason viiy the 
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position control yielded better performance than the rate control for 
our pick-and-place tasks. It should be noted, however, that the 
pick-and-place task is a positioning task. If the task is following a 
target v;ith a constant velocity, then velocity (rate) control would 
perform better. 



Acceleration Control 

Ihree-axis pick-and-place tasks were also tried wj.th acceleration 
control. It turned out, hcwever, acceleration control was not adequate 
to perform stable ^ safe pick-and-place operations. In acceleration 
control, the manipulator tends to move almost all the time even thou^ 
the joystick is at the center position. Note that in pure rate 
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cx»nbx>l, the manipulator does not move v*ien the joystick is at the 
center position regardless of previous history of the joystick 
displacement. 



Human Adaptation to Gain Change 

Mean conpletion time did not change much for the various gains tested 
(Figure 7) , which means that the hxanan operator adapted well to the 
gain change (McRuer et al., 1965; Young, 1969; Stark, 1968). Both 
lower and higher gains relative to the optimal gains caused sli^t 
increase in the mean completion time. A reason of slightly longer mean 
conpletion times with lower gains is because lower gains demand wider 
jqystick displaccioents and it takes longer for the finger or hand to 
displace' the joystick wider. A reason for sli^tly longer mean 
conpletion tiir^ with hi^er gains is that hi^er gains demand more 
minute joystick displacements, degrading effective resolution of the 
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joystick control. An aciditional inajor reason for longer mean 
coropletion tiroes with lower gains for the rate control is due to the 
velocily liinit. 



Force Joystick 

The two coraraon joystick types are the displaceroent and force 
jpysticiks, Hie outqput of the displacement joystick is proportional to 
the joystick displacement^ \Aiereas the outqput of the force joystick 
(iscraetric or stiff joystick) is proportional to the force applied by 
the human operator. The advantage of the force joystick is that it 
reqiiires only minute joystick displacements (a few micrometers) in 
contrast with the displacement joystick (a few centimeters) . 

Pick-and-place tasks were performed for pure position and rate 
controls with displaceroent axd force joysticks. The e>5)erijnental 
results for two subjects (Figure 9) shows that in the rate control, 
task performance with force joystick was significantly faster than that 
with displaceroent joystick. This is mainly because the force joystick 
senses the applied force directly, requiring only very minute joystick 
displacements. In the position control, however, the force joystick 
performed no better than the displacement joystick. In fact, all three 
subjects preferred to use the displacement joystick in this mode, since 
the force joystick required more force to be applied than the 
displaceinent joystick, especially when the manipulator hand is to be 
positioned far away frcan the initial center position. Position control 
also performed better than the rate control regardless of joystick 
types, and furthermore the position control with the displacement 
joystick performed best for our pick-aiid-place tasks (Figure 9) . 



Resolution 

The experimental results demonstrate the stperiority of position 
control vdien the telemanipulator has a sufficiently small work space 
(Figures 7, 8, & 9) . Note that our three-axis pick-aM-place tasks 
used in this e:q5eriment inplicitly assumes that the manipulator work 
space is small or at least not very large, since oor task allows the 
human operator to perform successful pick-and-place operations with a 
display showing the entire work space on the screen. Exaitples of small 
work space telemanipulators can be found in nuclear reactor 
teleoperators, surgical micro-telerobots, or smcill dexterous 
telerdbotic hands. Position control can also be utilized during 
proximily operations in conjunction with the force-reflecting joysticks 
for enhanced telepresence (Bejczy, 1980). VJhen the telemanipulator 's 
work space is very large as conpared to human operator's control space, 
position control of the entire work space suffers from poor resolution 
since human operator's control space must be greatly i5>-scaled to 
accoanmodate the telemanipulator *s large work space (Flatau, 1973) . One 
way of solving this poor resolution problem in position control is 
using indexing (Johnson and Corliss, 1971; Argcnne National Lab, 
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1967) . In the indexed position control mode, the control stick gain is 
selected so that the full displacement range of the control stick can 
cover only a small portion of the manipulator work space, and large 
movements of the manipulator hand can be made by successive uses of an 
indexing trigger mounted on the control stick. Note, however, that 
rate control can inherently provide any hi^ier degree of resolution by 
mere change of control stick gain vdthout use of indexing. 



Homearaorphic Controller 



Most of our pick-and-place and tracking experiment's were performed with 
joysticks as the input device thrco^ vMch the human operator 
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oontix)lled the siniulated manipulator. The operator's inavements when 
using joysticks are non-honveamorphic, so that the movements he Most 
make to produce a desired manipulator response do not match the 
movenent of the manipulator end effector. Ttwjis, he most mentally 
convert the desired end effector position to Cartesian coordinates and 
use the joysticks tc input these coordinates. 

To atteiipt to stuc^ vdiether a truly homeainorphic irput device coulr) 
inprove performance in tracddng tasks, an apparatus of identical form 
to our simulated cylindrical manipulator was built. A vertical rod was 
si5>ported by bearings on the base to allow rotation, theta. A 
counterwei^ted horizontal arm was attached to the rod with sliding 
bearings to permit rotation and translation in the r and z axes 
respectively. Ihe human operator could control position throu^ a 
handle on the end of the arm corresponding to the end effector of the 
simulated manipulator. Potentiometers measured movement in each axis 
to determine iiput r, theta, and z. Ihe LSI-11/23 ccnputer read these 
values chrou^ A/D channels and displayed the manipulator in the 
identical position. 

Biree-diitiensional tracking e55)eriments were performed with the 
homecmorphic controller and with joysticks for gains varying from 1 to 
5 to ccorpare performance (Figure 10) . The results do not show a 
significant difference between the homeamorphic controller and 
joysticks over the range of gain values. Althou^ the larger movements 
required for the hamecatorphic controller, with greater inortia ai>d 
friction than the joystick, may have limited performance, we believe 
that human adaptabililY minimizes its advantages. 



Training by Optimal Control Exanple 

A siiiplified simulation of the manned maneuvering unit, MMV, enabled 
study of training of human control performance (Jordan, 1985) . Only 
three translatory degrees-of-freedom, x, y and z, were used. Thrusters 
generating pulses of acceleratory control were controlled via a 
kei^x^ard and the task was to accelerate simultaneously in x, y aM z to 
a maximum velocitY/ transit to the desired new location, and decelerate 
agaiji simultaneously. Two displays were used — a perspective display of 
a minified model of the MMV, or two two-<iimensional projectors of that 
model with a small inset of the perspective display. 

Subjects generally performed poorly during the few hundred seconds 
allowed for the tasks (Figure 11a) . It was decided to allow the 
subjects to view this control problem carried out by a simple optimal 
control algorithm (see Figure lib) . This e^^^erience was of 
considerable help and several subjects then performed quite well 
(Figure 11c) . 

This e^qperiment, leaming-by-example, illustrates a strategy that 
perhaps may be effective in more coiplex and realistic tasks as well. 
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INDUSTEUAL ESRIVERS FOR CERTAIN NECESSARY 
SPACE STATION TEQINOIDGIES 

This Dk^yt section deals with the future, and especially with 
"industrial drivers" other than NASA for new technologies vhic±i may be 
required in the evolving Space Station. In Table 5 I list nine 
ocnponents of a telerdbotics system that certainly seem to be driveri by 
iiiportant industrial hardware requirements, research and development. 
Therefore, it seems reasonable for NASA to sit back and wait for ard 
evaluate these develcpi^ents, saving its resources for those necessar/ 
technologies that will not be so driven. 

looking at these figures gives us some concept of hew industrial 
develcpaent may provide various types of technologies for the evolving 
Space Station; indeed, NASA may be able to pick and choose from 
off-the-shelf items! For exaitple, the most pcwerful conputers on the 
last space shuttles were the hand-held portable conputers that the 
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FIGURE lib: Training by exaitple (human operator control after automatic) 
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TABLE 5 Drivers other than NASA for Nine Needed Technologies 



Robotic Manipulator and Control Scheme 
Joystick - Aircraft 

^ Manufacturing Industry, Nuclear Industry, Mining Industry, 
Sensors: Force and Touch; compliant control 
BOV and Mobility 

Military, tanks and other vehicle plans? 

Undersea WV - Oil and Communications Industry 

loccDonotion - University Research 

Shipping Industry: Ships at Sea [AR, TR, Man] 
TV Camera 

Entertainment Industry - commercial device 
Security Industry 

Need mounts, controls and motors for PAN, TIIT and for Stereo VG 
Graphics 

Entertainment industry is a better driver than cotpanies building 

Fli^t Simulators; 
HMD as an example. 
EM sensors research/Head-Eye Mouse 
ICM 

landsat 
Security 

Medical Industry - CT and MKT 
Industrial Production Lines 
TD - linage Understanding 
Computer 

Ccorputer Industry 
(HDW) and (SPW) 

Ccttiputer Science research base is new very broad 
Communication 

Commanication Industry is huge 
Ships at Sea 
EW Conopression 
Eemote Oil Rigs 
Arctic Stations 

Plans ajid Protocols to Combat H.O. Faticme and to Promote H.O . 
Vigilance 

Office Automation Forces 

Air Traffic Control Needs 

Security Industry 
Cooperative Control 

Military - submarine control 

Helicopter fli^t control 

Air traffic controllers 

Nuclear industry 

Chemical plant iivJustry 
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astronauts brou^t aboard vMch contained iraich greater capability than 
the on-board ccffipxters; those had been frozen in their design ten years 
ago in the planning stages for the space shuttle. 



NECESSAR5f TKTFTODBOTICS TECHNOLOGIES TO BE SPARKED BY NASA 

Hcwever, there are several areas in telerdbotics that may likely not be 
driven independently of NASA, or v^iere NASA may have an iirportant role 
to play. Indeed, the Congress has specifically mandated that 10% of 
the Space Station budget should be used for Automation and Robotics 
develcpnent, and that this in some sense should spearhead industrial 
robotics .In the United States (Table 6) . 



TABLE 6 Areas Sparked by NASA not Industrially Driven 



Visual Enhancements for Graphic Display 

Telepresence with Stereo Helmet Mounted Display (HMD) 

Multisensory Ir^put Ports: 

Worry about H.O. overload condition 

(especially with cooperative control and communication) 

Hi^er Level Robotic Vision: 

E5cairple — linage Coirpression by Jfodeling (ICM) 

(to require less information flow and faster i^xJate) 

Special Control Modes for H.O. 
Homeamorphic control 
Bilateral control 

Time delay ajnd preview control for time delay 
Coirpliant control 

Hi^er Level Control Languages 

(such as RCCL; fuzzy control; path planning by potential field 
construction) 

Remote operating vehicles (ROV) special control problems: 
Navigation, orientation, obstacle avoidance for RDV 

Cooperative Control: 

Cooperation amoi>gst humans, telerobots, aixi autonomous robots 

Conpliant, Flexible, Homeamorphic Manipulators 
Grasp versus tool using 

Homeamorphic IXial Jfcde Control 

litpedance Control 
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UNIVERSnY NASA RESEARCH 

I now would like to make a plea that NASA should expand and stimilate 
telerobotics research cxDnducted within the university environment* Of 
cxjurse, as a professor I may have a bias in this direction and I am 
willing to listen to contrary arguments! In addition to the benefits 
of the research accoroplished by universities, NASA also gets the 
education and training of new engineering manpower specifically 
directed towards telerobotics, and focused on the evolving Space 
Station. 

What kind of university and educational research should be funded in 
general by NASA. I believe there are two levels of cost (with however 
three directions) into vMch these educational research labs should be 
classified. 

(i) First are Simulation Telerobotics Laboratories . Here we need 
graphics ccofrputers, perhaps joysticks, perhaps hi^er level supervisory 
control languages, cameras, image ccmpression techniques and 
oomraunication schemes. I would guess that our country needs at least 
thirty such systems for education and training. These systems should 
be very ine^^jensive, approximately $50,000 each. Biey need not even be 
paid for b/ NASA, since universities can provide such research 
simulation laboratories out of their educational budgets or from small 
individual research grants. Our Telerobotics Unit at Berkeley has been 
thus funded. A good deal of exploratory researcih can be carried out 
inexpensively in this manner. 

(ii) Second, we need Telerobotic Laboratories with physical 
manimlators present as iiiportant research carrponents. In this way, 
e^qjeriments with various robotic manipulators, especially those with 
special control characteristics such as flexibility, homearaorphic form, 
new developnents in graspers, ax^ variable iJOfpedance control modes, 
other than are found in standard industrial manipulatx)rs, would be 
possible. I guess that there are about five such laboratories in some 
stage of development at major universities in the country. I would 
further estimate that these laboratories could each use an initial 
development budget of $300,000 to enable them to purchase necessary 
hardware in addition to software as existent in the simulated 
Telerobotics Laboratories. 

Another set of costly laboratories would be Telerobotics 
Laboratories with remote operatorincr vehicles ( ROV) . Here again, we 
need about five laboratories at universities with first class 
engineering schools. Again, I estimate about $300,000 each for the 
initial hardware si^jport of these RD7 labs. They could then study 
transfer vehicles, local Space Station vehicles, Moon/Mars Rovers, and 
even coitpare MMU vs. telerobotic controlled vehicles. 

The university laboratories would contrast with BX)d serve a 
different function than ongoing aerospace industrial laboratories, and 
NASA and other government laboratories. These latter assemble hardware 
for demonstration and feasibility studies. Ihen imfortunately they^ 
are somehow vmable to carry out careful human factors research dealing 
with the changing design of such pieces of equipment. In the 
university setting, this apparatus could be taken apart, changed. 



ERIC 



323 



316 

^^^SJff^' ^ ^ flexibility would inform our current 

?S?^r:^* .J Y^"^ ^ contrast the Gossamer Condor and Gossamer 
Mbatooss vath the NASA program. It was clear that if McCready was 
ev^^ be successful, he had to build an e:q)eriinental plane vMch was 
ej?)ected to break down each ejqperiinental day. But the plane could be 
JSr^^'^^®' miiTutesl niis "laboratory bench" concept is so 
different from twenty-year-ahead-planning currently controlling our 
space program that has been effectively elijidnated at NASA. I think it 
is aaportant to reintroduce rou^ and ready field laboratories back 
into the space program. 

NASA PRIZES 

Another role that NASA mi^t play is to offer demonstration contracts 
or, even better, prizes for aocotnplishment of specific tasks. Again I 
turn to the Kcem^ Prize; here a private individual donated prize money 
to be awarded to t.ie first to build a man-powered aircraft conf ormina 
to certain carefully laid out specif icatic^S: conrorming 

Comniunication c±iannels for controlling remote vehicles and remote 
manipulatoEs are already set vap. ihus we could have prize contestants 
demonstrating at differing locations on earth at one "g"; next 
demonstrations using elements capable of operating in space, or even 
roace stringently, of having that minimum mass capable of being lifted 
into ^ce; and then we mi^t hiave true shuttle and space station 
demonstrations. 

INTEHECHmL PROBLEMS IN IR FOR IHE SPACE STAITGN 

Finally, I would like to leave you with the thou^t that the list of 
to-be-sparked-by-NASA problems in Table 6 contains many important 
intellectual problems facing the area of telerobotics. Although these 
areas are being approached in our research community at the present 
Ji^'J- ^ be possible to foresee vtot novel kinds of challenges 
will faaj the evolving Space station in twenty years. Even thoucm I 
P^^^^. accurately, I certainly hope I am there in person to 
watch telerobotics playing a major role in operating the Space station. 

SUMMARY 

The telerdbotic, IR, system is a simulated distant robot with vision 
and manipulator and/or mobility subsystems controlled by a human 

^ iitfonned mainly by a visual display , but 
also ^ other sensors and other sensory displays, i.e. auditor/, force 
or tactile. His COTtrol can be direct via joysticks, or simenrisor/ 
viaama^^ control primitives effected by partially autonomous 
rt^ic fui^ions. Delays and bandwidth limitations in communication 
are key problems, complicating display and control (Stark et al., 
1987) • 
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Class ejq^eriments enabled cur Telerobotic Unit at the University of 
California, Berkeley to e^qjlore in a number of research dii:ec±ions. 
Ihe HMD direction has new been greatly extended and is a major focus in 
our laboratory. On the other hand, the homecatorphic controller did not 
seem to be a productive project to continue because of the adaptability 
of the H.O. to many configurations of control. Also, our interest in 
si55ervisory and other hi^ level controls is leading us away from the 
direct manual control. The st:. ""^nts taking a graduatie cont:rol course, 
ME 210 "Biological Control Sytems: Telerobotics," during the fall 
semest:er, 1985, in vMch the helmet mounted display, HMD, is 
eirphasized, were entliusiastic and felt the course stimilated their 
creativity and provided an qpportunity for them to engage in relatively 
unstructured laboratory work— a good model for subsequent thesis 
re::»earch. 
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DISCUSSION: 



cxmmis ON telepresence and supervisory control 
Antal K. Bejczy 



Telepresence and SLopervisoiy control technologies, as Professor 
ShericJan pointed it out, represent advancements or refinements of 
eidsting teleqperator technology capabilities. Both technologies are 
strongly driven by and rely vpc-^ increased conputer and ccmpiting 
capabilities and are regarded as substantial contributors to evolving 
space station capabilities in the sense of reducing EVA astronaut 
involvement xn assembly, servicing and maintenance operations. 
Moreover, both technologies carry the promise of substantial spin-off 
for advancing capabilities of the U.S. prxxJuction and service 
industries. 

Professor Sheridan and Professor Stark enumerattrf, and elucidated 
many specific tcpics and issues in sensing, controls and displays for 
telepresence and si^^ervisory control vMch need research attention to 
advance the state of the art in the two technologies. In ray discussion 
and comments, I would like to focus attention on the same research 
topics and issues from the following viewpoints: (a) In vdiat sense and 
to vdiat extent can we ej^ject the enhancement of human operator 
capabilities throu^ telepresence and si^jervisory control? (b) What 
specific conditions and constraints are inposed by the space 
application environment on tht evolving telepresence and stroervi«:^rY 
control technologies (c) Ihe raultidisciplinary nature of the 
required research effort since neither telepresence nor supervisory 
control are intrinsically separate science or engineering disciplines. 
A brief description of the basic objectives of telepresence and 
supervisory control technologies may help illuml^te the questions that 
arise from the above three viewpoints. 

The basic 'Objective of telepresence technology is to alleviate the 
human operator's sense of remoteness in the control station by 
providing siaf f icient information to the operator on the activities 
the remote machine in usable fom. Ihe content of the last attriL e 
"usable form" heavily depends on human cajDabilities under given 
conditions, on the capabilities and characteristics of machines to be 
controlled, and on the nature of tasks to be acconplished. Also 
inplied in this technology is the operator's enhanced control response 
ability to the perceived remote events. Briefly, telepresence 
technology is aimed at providing—so to speak—a more intimate. 
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sensitive arxi hi^ fidelity input and output connection between 
operator and remote machine. 

Ihe basic objective of supervisory control technology is to provide 
sufficient capabilities for the human operator to tell the remote 
machine v*iat to do and, eventually, how to do it, without involving the 
operator in continuous control coordination of a multitude of machine 
actuators needed to execute a task (note that a dual-arm system 
contains fourteen or more actuators) . Thus, in si.5)ervisory mode of 
control, the operator controls the task instead of controlling the 
individual degrees of freedom and associated actuators of a 
multi-degree-of-freedom coitplex machine, Boplied in this technology 
are two inportant technical capabilities: (a) flexible automation of 
actions of a multi-degree-of-freedom conplex mechanical system, and (b) 
flexible language-like or menu-type interface to, or interaction with, 
the a\itomated mechanical actions of a remote machine. 

Several notes should be added to the objective descriptions of 
telepresence and supervise :y control technologies. First, none of them 
eliminates the human operator from the operation, but both change the 
operator's function assignments and enploy human capabilities in new 
ways. Secata, both technologies promise the performance of more tasks 
with better results, but, in doing so, both technologies also make a 
close refere^nce to human capabilities of operators vAio will use^ 
evolviiig new devices arvi techniques in the control station. Third, 
both telepresence and si5)ervisory control technologies make reference 
to evolving capabilities of other technologies like sensing, hi^ 
performance conpiter graphics, new electro-mechanical devices, 
ccarputer-based flexible automation, expert systems for planning and 
error recovery, and so on. Thus, the progress in both technologies are 
tied to rich multidisciplinary activities. Fourth, both technologies 
require the evaluation and validation of their results relative to the 
application environment. For space station scenarios this inplies the 
effect of zero-g on hman operators, restricted local resomx:es (like 
power, vork volume, etc.) for a control station in Earth orbit, limited 
coramunication bajidwidth and some commurication time delay between a 
control station and remote machines, fragile and sensitive nature of 
space systems a telecperator machine will be working on, changes in 
visual conditions in Earth orbit relative to visual conditions on 
Earth, and so on. 

Olie above notes, together with the objective description of 
telepresence and supervisory control technologies, motivate a few 
litportant conclusions. 

First, the hi^ fidelity, human operator referenced, man-machine 
ooi^Jling— hardly worked on in telepresence technology — suggests we 
revisit anthrqpomorphic machine technology o The primary reason for the 
revisit is not a declaration of some intrinsic pptimality of 
anthropomorphic machines, but a recognition of their potentially easy 
and natural interface to human operators to physically extend the rich 
human manipulative capabilities, embodied in the dexterity of the human 
hand, to remote places. One may visualize a backdrivable glove-type 
device on the qperator^s hand connected throu^ bilateral control to a 
controllable mechanical replica of the human liand equipped with some 
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sensing capabilities. Diis vision may not seem too strange when 
c^abilities of conponent technologies needed for the development of 
this anthrcpcanoriSiic machine are considered. 

Second, the performance of nonr^)etitive, singular or unes^jected 
telecperator tasks in space may benefit frcm the develcptient of shared 
manual and automatic oottpiter control techniques whenever application 
scenarios permit their use. Ihese techniques intend to combine the 
best attributes of human operators and cceooputer control under 
restricted conditions. 

ISuxd, the operator is facing a very rich environment in the control 
station in terms of decision, ccanmand, control and information 
processing even with increased telepresence and supervisory control 
capabilities. IXae to the nature and time scale of activities in 
telemanipulation, the operator's mental status and readiness can be 
ccatpared to an airplane pilot's functional situation during take-off or 
landing. Thus, proliferation of control and information hardware ii^ 
the control station does not serve the best interest of the human 
cperator. Ihe more computer technology is employed at the control and 
information interface in the control station in a clever way, the 
better off is the huiran operator to make control decisions efficiently. 

Fourth, the R&D effort for advancing telepresence and si^jervisory 
control technologies should be acccrapanied i^r systematic work on 
developing a human factors data base and models for understandir^g and 
utilizing the results of these evolving technologies, it is apparent 
frcan the nature of these evolving technologies that the limits or 
limitations rest not so much with the technologies themselves but with 
the human capabilities to absorb and use these technologies. 

Fifth, final evaluation and validation of tel^resence and 
si?)ervisory control technologies for space station naturally require 
e^)eriments and manifests in space vAienever human perception, decision, 
control and other activities are influenced by space conditions. 
Simulations are useful research and developnent tools, and they can 
pave the way towards performance evaluation and validation. But a 
ccffloprehensive simulation of true space conditions on Earth for 
developing a hvman factors data base and models in tel^resence and 
supervisory control technologies does not seem feasible. 

Professor stark make a strong case for NASA-University research in 
this arena. Hie benefits of NASA-University connections in human 
factors research in the field of telepresence and supervisory control 
can indeed be manifested through past and present exaitples. 
Particularli appealing are cases when graduate students carry out the 
experimental part of their thesis research at NASA-sipported, unique 
laboratories like ARC, JPL, JSC, and so on, or when students spend some 
working time at NASA laboratories as cooperative students or as 
academic part-time ertplqyees working on topics related to their 
university studies. 
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SYNOPSIS OF GENERAL AUDIENCE DISCUSSION 



C^JESnCNS AND ANSWERS 

Uie first question \ras focxissed on a cxsmraent, itade by Professor Larry 
Stark, that wide-f ield-of-view displays are particularly needed in 
fli^t; simulators. T5ie question was prefaced with the suggestion that 
this is a limiting technology for anyone \^o is interested in robotics 
applications in space, vdiere (a) the location of the observer is likely 
to be Hoving, and (b) the observer needs to be concerned, not only 
about the orientation of the dbj^ beijng manipulated, but also about 
his or her own orientation with respect to sortB larger coordinate 
range. It was noted that there are some state-of-the-art wide filed of 
view displays that cost millions of dollars and proposed that some kind 
of research to lower the cost of wide-f ield-of-view displays mi^t be 
in order at this point in time. 

Professor Stark replied that, in this opinion, v;ide-field-cf-view 
technology is very ircportant. He provided the following exaitple: 

e When people lose their wide f ield-of-view (e.g. , have tunnel 
vision due to some ne\nx)logical disease) they find that they can 
read and their visual acuity is 20-20; they find, however, that 
it is hard for them to merely walk throu^ a doorway because 
they are lacking a functional flow-field, the lateral and 
vertical e^qjansion flow-fields, which are directly connected by 
primitive neuro-pathways to the vestibular system axvi are 
coordinated in the foculous of the cerebellum as shown in some 
brilliant studies by Jerry Simpson and other neurophysiologists 
recently; the lateral and vertical e35)ansion flow-fields give us 
our orientation. 

i» On the other hand, vdien people lose their foveal vision vdiile 
retaining their flew fields, they are legally blind (with a 
vision rating of 20/200) ; they may not be able to read, however, 
they can still walk through rooms, get into a car, and drive 
(patients say — "You know. Doctor, I can drive very well, I jxist 
can't read the freeway signs, so I don't know when to get off") . 
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Professor stark concliaded that, v4ien pecple are doing some tasks 
(manipulating, inspecting) they need foveal vision. In other cases 
(moving abait vdthin an area) they may need a wide-field-of-view. The 
human visual system is a dual system— we have both— and it should be 
possible to design something (perhaps lasing inej5)ensive T7 cameras) to 
provide wide-field-of-view for gross movement tasks, and hi^ 
resolution (like reading glasses) for manipulation tasks „ 

Ihe second question was directed at Professors Sheridan's comment 
that there is yet good way of describing (or r^resenting) the 
process of manipulation, it was suggested that sorrething like the 
notation system us^ by choreographers, to represent complex dance 
motions, mi^t be useful in this context. 

Professor Sheridan agreed that "labamtation" (dance scoring) or 
musical scoring (vMch is more thorou^y developed) , is the kind of 
thing that mi^t be usefUl--given a substantial amount of additional 
develcpnent. One problem discussed in relation to the use of this type 
of notation, was the fact that, for a given instrument, the range of 
manipulations (speed or fingering) is fairly constrained. 

In teleqperations and robotics manipulations, the notation system 
would have to be able to cope with continuous geometry, hyperspace, and 
time. In this type of manipulation, considerations include: multiple 
degrees of freedom (six degrees of freedom for ar^ object, pli;is majioe 
the six derivatives, plus the six accelerations— and that is just the 
beginning) and multiple objects/components in motion (v^en three or 
four things are moving in relation to one another you immediately get 
into a twelve or twenty-four dinensional space and problems of dealing 
with trajectory in state-space to describe a manipulation) . It is a 
very big order to develop a notational scheme which is both 
sufficiently cortplex, and sufficiently canrprehensible, to be useful. 

Professor Newell noted that the problem of telepresence (generating 
a feeling, on the part of a remote operator, of "being there" at the 
work site) is an interesting exaitple of a situation v^ere researchers 
are working with only a seat-of-the-pants notion of the underlying 
concepts. He suggested an immense need for a theory and a plai;isible 
itodel of presence — a theory of vdiat happens to humans (and v^y) v^en 
they "project" themselves to a remote work site. 

Professor Sheridan suggested caution in the use of of terms like 
"project oneself". He noted that it mi^t be possible to project 
oneself throu^ drugs, or some other method, vdiich would not be 
particularly helpful in terms of performance. In addition, he 
suggested that "being in control of" a remote operation mi^t not 
require a feeling of "being there"— that telepresence hy itself is not 
the goal— it is really performance that makes the difference. 

Ihese caveats notwithstanding. Professor Sheridan agreed that the 
develcpnent of a cognitive theory of presence would be a hi^y 
desirable goal. He suggested that "pieces of it are lying around" 
(e.g., the work of Murraj' and others in image rotation^ etc.) . 

Professor stark sugge£;ted that "teleprojection" is a very natural 
phenamenon. He noted, for exaitple, that vdien an athlete swings a 
baseball bat, that he or she as an operator/tool user is able to 
"project" kinesthetically and visually to the end of the bat. He 
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pointed out that people automatically develop models for activities 
that they do on a regular basis (e.g., picking up a pen, using 
tweezers) , and suggested that persons operating renote equipment (e.g. , 
a robotic arm 200 miles away) would develop the same sorts of 
itcdels—as long as there is some sort of causal relationship between 
their behaviors and the behavior of the remote system. 



OQNCIIJDING REMARKS 

In concli;ision, one should note that telepresence and si:5)ervisory 
control are nut mutually exclusive. Telepresence is needed in 
si:?)ervisory control. The si5)ervisory control language, for exanple, 
r^resents only one abstract operator output ii;terface to the remote 
system. The perceptive element in si:5)ervisory control, that is, the 
information irqput to the operator from the remote system, should be in 
the form of telepresenca "frames" in order to help the operator to 
determine the necessary abstract commards. 

Wfe should also note that telepresence has both qualitative and 
quantitative aspects. The qualitative aspects of telepresence are 
useful for stabilizing a control situation. The quantitative aspects 
of telepresence are not well understood (as indicated by control 
e^qperiments) . For instance, vyhen I am working in a force field, and I 
have active force feedback to my hand, then I am stable—but I have a 
poor quantitative perception of the acting forces. However, if I show 
the values of the acting forces on a display simultaneously with the 
active force feedback to may hand, then I am stable and reasonably good 
quantitatively. This type of cross modal referencie should also be 
considered in creating telepresence capabilities. 
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SOCIAL FACTORS IN ERODUCi'iVi'iY AND EE3?H3RMANCE 
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SOCIAL SIRESS, C3CMEUIER-MEDIATED OCXMJNICATION SYSTEMS, 
AND HUMAN ERDDUCTIVm IN SPACE STATIONS: A RESEARCH AGENDA 



Karen S. Cook 



INTRODUCTION 

The sheer ccarplexity of the space station program is enoiai^ to boggle 
the mind of any academic trained in a single discipline. Certainly, 
space station design requires tine iiltimate in interdisciplinary 
teamwork and integration of basic and applied programs of research. In 
this sense, the project demands knowledge and insists not easily 
produced in an isolated discipline, be it engini^ering, aeronautics or 
sociology. It is a challenging tasGc and one that should ca.ll forth the 
best efforts of those touched by the allure of extending the boundaries 
of human knwledge. 

For a sociologist thera are a myriad of research problems vMch cone 
to mind in even a cursory glance into the windcw of the futvir^ as 
envisioned by those currently planning tlie space station prcjram. 
Clearly, a wide range of processes and factors must be taken into 
account vdien considering the more social aspects of this enterprise. 
These include technological constraints, environmental pressures, 
physiological limits, psychological processes (including cognitive 
capacities and motivational factors) , and the many interfaces between 
••man" and machine requiired by the intense interdependencies of human 
and technological forces in space. Such intense interdependencies in 
this extreme are much less often observed on earth (with the possible 
exception of certain medical contexts in vdiich life is tenuously 
maintaine^l by sheer technological si^jport) . 

Given this realitY/ cannot extrapolate easily from v^t is known 
about socielY as we e^^^erience it on ea2±h and "life aloft." It has 
even been said that humans may became a very different species vMle in 
space. Similarly, social systems vMch emerge to support and maintain 
life in this context may deviate along many dimensions from those 
social structures and processes that are a part of oui daily existence 
and often so "routine" that they are taken for girantecl. Nothing must 
be considered as "routine" in a novel environment. It mu^t be said at 
the outset that vihat we transport from earth in the way of social, 
psychological and organizational adaptive mechanisms (e.g. noms, 
rules, shared e^qpectations, roles, etc.) may prove mudh less functional 
than we envisioned given a caropletely altered social and technological 
environment. Because we have virtually no scientific evidence 

329 



335 



330 



conceniing the parameters of life after ei^ty-fcur cJays in space (that 
is, there is no U.S. e}q)erience to rely on) , one is forced to engage 
in speculation and extrapolation despite the potential pitfalls. 

reading of the documents we have been si^plied with concerning 
th3 space station program in the 1990s and beyond and my very limited 
es^xDsure to NftSA thrxxi^ a two-day symposium, lead me to several, 
tentative cor«plxasiQns regarding the most critical social contingencies 
(besides the issue of conflict addressed by l-Iichener) confronting NASA 
as it plans for the extended duration existence of grx>i5)s of 
individuals in space with limited opportunity for replacement or exit. 
Biese critical contingencies incltide the social and psychological 
management of stress (regardless of the nature of the stressors) and 
determination of the most efficient and socially productive mechanisms 
for handling interpersonal communications (e.g. within the crew, 
between crews of different modules, and between the crew and the 
"ground," including family meanbers and friends) . The successful 
management of both stress and interpersonal communications is critical 
to individual and groip-level performance, productivity and ultimately, 
''mission success." While there are many other issues vMch could be 
investigated profitably from a sociological perspective, time and space 
limit the scope of this first foray into life as currently envisioned 
on space staticffis. 



STRESS, IfJDIVIEUAL PERFORMANCE AND GROUP ERODU Ci ' iVriY 

Stress has been identified as a contributing factor in the etiology of 
certain acute and cihronic illnesses (e.g. ulcers, hi^ blood pressure, 
heart attacks, nervous disturbances, etc.) . It has been demonstrated 
to have consequences not only for the health status of individuals, but 
also for individual performance, decision-making and productivity. 
With respect to space-related research Poushee (1986) states that an 
iitiportant goal is "to understand and minimize the effects of acute and 
long-duration stresses on group flmctioning." Althou^ there is 
enormous literature on the effects of stress on individuals, 
researchers have beei; slow to address the iitpact of stress on groups. 
Furthermore, the bulk of the existing research examines the physiologic 
and psychological consequences o2 stress. There is much less work on 
the antecedents of stress, in particular the stresses created by social 
factors (Pearlin, 1982) . Another limitation to existing research is 
the tendency for investigators especially in e355erijnental work to focus 
on single, isolated stressors. Ihis work is extremely inportant, but 
it does not inform us about the interactive and/or cumulative effects 
cf mailtiple stressors. 



Defining and ^feasuring Stress 

The most commonly cited definition of stress is Hans Selye's, "the 
nonspecific, ttat is, common, result of any demand vpon the body, be 
the effect, mental or somatic. " In the tradition of research initiated 
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by Selye (e.g. 1936, 1956, 1974) this "result" or reaction of the bocSy 
to stress is referred to as the "general acJaptation syncSrome" (GAS) or 
"biologic stress syndroane." It consists of an alarm reaction 
biologically detectable in sudi organs as the adrenal glands, thymus, 
lymtx nodes and stoanadi, followed by the stage of resistance 
accarpanied also by xtarted physiologic responses, then the stage of 
e)diaustian at vMch point Selye argues the acquired second-stage 
adaptation is lost* 

Other researchers eirgphasize the significance of the "cognitive 
^raisal" of stressors (see Breznitz and Goldberger, 1982, etc.)/ 
nctii^g the importance of the "subjective, phenanenological e}$)erience 
of stress" vftiidi lies between the stressor and its effects. Sane 
definitions of stress include reference to cognitive appraisal, others, 
like Selye 's, do not. Currently, there is no agreed vqpon definition of 
the term and existing differences reflect major unresolved theoretical 
debates in the field. Ihou^ they disagree on the significance of 
cognitive appraisal, researchers do agree on the common goal of 
vmderstanding adaptations to stress or the nature of coping 
mechanisms. Much of the current research focuses upon specifying the 
nature of these mechanisms. Before discussing adaptations however, let 
us examine the problems associated with the measurement of stress. 

Various approaches have been adopted to the problem of measuring 
stress; none of them corrpletely satisfactory. One of the most caramon 
approaches to measurement, popular over the past two decades because it 
can be applied outside e5$)eriroental settings, is the "life-events" 
scale (e.g. Holmes and Rahe, 1967) or the modified life-events scale 
(Dohrenwend and Dohrenwend, 1974a, 1974b) . Life-events l^ically mean 
"objective events that disrupt or threaten to disriKrt: the individual's 
usual activities" (see Dohrenwend and Dohrenwend, 1974b: 133, 1984). 
Events listed on such scales include both health-related (onset of 
chronic illness, major illness or accident, etc.) and non 
health-related events such as divorce, separation, increase in family 
ixKxsoe, retirement, death of a spouse, pregnancy or remarriage, etc. 
(see Tlioits, 1981, for a cogent critique of the life-events approach) . 

Ihe main debate in this research tradition has been over vtoether or 
not only landesirable events contribute to stress or viiether events that 
require change either desirable or undesirable produce stress. The 
latter has been referred to as the "total change" approach to measuring 
stress, the former, the "undesirabilitY" approach (Thoits, 1981) . 
Bioits (1981) identifies several studies suggesting that only the 
undesirable changes significantly affect stress levels, althou^ she 
goes on to critique these studies as well as marry of the total change 
studies for failing to include independent indicators of their 
independent and dependent variables. Her findings also suggest that 
*HAxen health-related events are controlled, other undesirable events 
have small and nonsignificant effects vpon psychophysiological 
distress" (as measured by reports cf psydiosomatic synptoms using the 
MacMillan Health Opinion Survey Index) . The main conclusion she draws 
relevant to current research is that "previously v;ell-established 
correlations between imdesirable events and distress may have been 
inflated doe to the operational confounding of health-related items on 
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the independent and dependent variable scales." A major contribution of 
new research on stress would be to refine existing ineasures of stress 
and to develop nore sensitive and reliable ineasurement techniques. 

Laboratory research enplqys quite different methodologies than 
survey research, hcwever, as Holrqyd and Lazarus (1982:26) point out, 
"lab paradigms in biological science have tended to isolate stress 
responses from the psychological and social context." OSiou^ 
measurement prdbleras are reduced in this way, little knowledge is 
gained concemir^ the interplay of physiological, psychological and 
social mechanisms. Holrqyd and Lazarus (1982:30) call for "field 
resoarcii that examines stress in the psychosocial context" and more 
descriptive work on the sources of stress "that operate in naturalistic 
settings." The space station environment is a "natural" laboratory for 
this type of research. 



Multiple Stressors in Space 

The oreality of space station existence includes the potential for 
continual and intermittent exposure to multiple stressor. In this 
regard it is not at all clear tliat much of the existing research, 
except that done in analogous environments, can be extrapolated to 
apply to the space station. Both the number and the magnitude of 
stressors in the space environment is likely to be at the hi^ end of 
existing scales, and quite possibly off the scale. Only research in 
rare, hi^ stress situations will contain insists of direct relevance. 

Sources of potential stress in space stations include sensory 
deprivation, environmental factors lite ncise level, crowding, spatial 
arrarigeniaits, and invasion of privacy, as well as isolation, 
confinement, and the possibility of life^-tiireatening dangers or crisis 
situations. Nickerson in L\ chapter for this volume includes in the 
category of potential stressors: wei^tlessness, imfamiliar motion, 
motj'^ restriction^ sensory and perceptual restriction as well as sleep 
inta-rference and acute medical problems. Work-related factors like 
variety and intensity of assigned tasks, and workload, etc. may also 
be stressors in the space station environment. Cooper (1983) indicates 
that in many work environments work or job overload is a major 
stressor, ihei. is some indication that workload intensity and time 
pressure were factors that contributed to the problems ejqperienced by 
crew members aboard the Skylab 4 Mission. According tc Holroyd and 
Lazarus (1982:24), "the individual vdio is constantly challenged by even 
relatively innocuous oca:5)aticnal and social demands and v4io Jg, as a 
result, repeatedly mobilized for struggle may be particolarly 
vulnerable to certain disorders (Glass, 1977)." Given the duration of 
planned space station missions, the cumulative physiological, 
psychological and social inpact of intermittent and continual ejqx^sure 
to multiple stressors must be investigated. 

Another- significant factor in space stations related to multiple 
stressors is the recognition that the stressors will be produced by 
quite different types of eventc and forces. Stressors may be produced 
both by the astronaut's heme environment, to the extent that s/he has 
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information about significant events occaarring on earth (e.g. in the 
lives of his/her close relatives and friends, etc. ) , and by life 
aloft. Within the space capsule, factors contributing to stress are 
enviromtientally induced resulting in both physiological and/or 
psydiological distress as well as socially induced, created by factors 
associated with the interpersonal environment, especially the intense 
interdependence of the crew nvembers. Since both jiiysiological and 
psychological factors have been given irore consideration in the 
existing literature, I will ernphasize the social forces likely to 
induce stress. 



Identifyir^ Socially Produced Stressors 

Outside of the life-events tradition and research focusing vpon 
occupational stress (e.g. Cooper and Payne, 1978) , there have been few 
investigations of stress produced by interpersonal factors in small 
grDi:p settings (Levine and Scotch, 1970) . Potential causes of stress 
in settings requiring intense interdependence aitK)ng groi^) ineanbers 
include basic personality conflicts, inconpatibilities in interpersonal 
orientation and style, an inefficient or inequitable division of labor, 
a lack of perceived legitiitacy concerning the allocation of leadership 
responsibilities or authority, the inequitable allocation of individual 
or collective rewards, lack of a clear definition of role or task 
responsibilities, uncertainty regarding the timing, coordination or 
sequencing of related tasks especially when synchronization is a 
critical factor, and the arbitrary or inappropriate exercise of 
authority or influence (i.e. violating role prescriptions or norms 
concerning the use of private time) . Many of these factors have been 
demonstrated to have significant iitpacts i:5)on group functioning in 
non-«trPssful situations and may or may not be exacerbated in 
situations of hi^ staress. Research on nrnntain-clinibing teams 
indicates that xmder periods of hi^ stress many of these prdDlems 
became extremely salient and in some cases result in aborted attenpts 
to reach the summit. Interpersonal conflicts appear to be a major 
problem for many e5q)editions especiall r when the goal of reaching the 
summit is hi^y valued by all and where there is a great deal of 
vincertainty about achieving the goal. Ccnnors (1985:147) also notes 
that in siinulation research, ''members of isolated and confined groi^js 
vAio were incartpatible showed increased stress, withdrawal, and 
territorial behavior." 

Many of these potential stressors have not been examined in the 
context of grcqp functioning primarily because the predominant model in 
this area of inquiry has been one of individual functioning. I will 
coraraent more \:5)on the limitations of such a perspective in a subsequent 
section of the paper. 
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Monitoring Stress 

Related to the problem of measuring stress and identifying the 
antecedents of stress is the problem of monitoring stress. Uhcbtrusive 
iftschanisms for loonitoring stress at both the individual (physiologic 
and psychological) level and the grojop level need developtisnt, given 
the potential deleterious consequences of hi^ levels of stress for 
individual and groiqo functioning. Aa inportant byproduct of such 
inonitoring is that it will give us soae insist into the interactive 
and cumulative inpact of various stressors. Furthermore, it will 
enable us to address issues still tinder debate regarding the extent to 
\diicih the effects are linear, curvilinear, or approxinate a 
step-function (or threshold function) . It may also be the case that 
the effects of certain stressors are ccjtpensatory given that not all 
the effects are potentially negative. Ihe positive inpact of stress 
has been given little attention in the literature. 



Personal Characteristj.cs, Crew Conoposition and Stress 

As several authors have suggested, the "rii^t stuff" may be the '^ror^ 
stuff" ^dien it canes to the selection of crew members viio will not only 
have the r^cessary technicsd and professional skills, but will also 
have the psychological and social catpetencies reqiiired for the 
creation of effective Interpersonal relations and relatively smooth 
groi:p functioning on space station "missioris." Acxsording to Biersner 
and Hogan (1984:495), veterans believe that "social canpatibility is as 
iitportant as technical skills for overall Antarctic adjustment" to 
isolation. Social conpetenos will became even more critical as a basis 
for selection and training in the future as NRSk envisions shorter 
training periods for some astronauts (e.g. teacher and congressmembers 
in space programs) . The potential for cormercial joint ventures with 
NASA not only increases crew heterogeneity, but also means that some 
space station members in the U.S. module will in all likelihood not 
have the ^ ^ .ef it of intense NASA training (and selection) . 

Intrigtang research by Helxireich and his colleagues (e.g. Helmreich 
et al., 1980) on this basic topic suggests that at least one 
characteristic typically associated with the "ri^t stuff" 
constellation of traits, interpersonal cottpetitiveness, may be 
dysfunctional for producing smooth groip functioning depending vpon the 
mix of personnel, and their traits in any particular crew. As Connors 
(1935:155) notes, Helmreich et al. (1980) "hypothesize that the 
ccttnbined interests of teisk acccnplishment and social canpatibilitY will 
be best served if crew menibers show a strong work and mastery 
orientation, but relatively little cottpetitiveness." 



Groi^ Decision-Ifaking Under Stress 

Research of particular interest to NASA is the research on the 
relationship between stress and decision-making which indicates that 
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the e55)erience of stress generally interferes with psychological 
processes related to effective decision-making. Janis (1982), for 
exaiiple, reports the following reactions associated with stress during 
decision-making: 

(1) narrowing of attention span and range of perceived 
alternatives y 

(2) reduction in problem-solving capabilities^ 

(3) oversi^t of lor^-tenn consequences, 

(4) inefficiency in information search, 

(5) premature closure, and 

(6) with intense fear, there is also tenporary loss of perceptual 
acuity and perceptual-motor coordination (Duffy, 1962) . 

Evidence further suggests that accelerating tiine pressure increases 
the prc±)ability of these reactions, althou^ clearly more research is 
needed on the tenporal aspects of stress reactions as well as situation 
specific/individual difference interaction effects. (Individuals in 
certain situations are likely to respond differently both to stress and 
to the demands of the decision-making task. ) 

Janis (1982) also specifies five basic patterns of decision-making 
lander stress. Ihe first four patterns in the list represent 
"defective" patterns of response, the fifth is the term Janis uses for 
the most adaptive response pattern. Observed patterns of response 
vmder stress include: 

(1) unconflicted inertia 

(2) lonconflicted change 

(3) defensive avoidance 

(4) hypervigilance, and 

(5) vigilance. 

Of the four defective response patterns, hypervigilance is found to 
be the dominant reaction under conditions of hi^ stress or 
near-panic. As Janis (1982:77) notes, "Excessive alertness to all 
signs of potential threat results in diffusion of attention. . .one of 
the main sources of cognitive inefficiency vdienever sconaeone beccatves 
hypervigilant, and it probably accounts for some of the failures to 
meet the criteria for effective decision-makirg." Results also suggest 
that other problems emerge in hi^ stress situations • "Alor^ with 
cognitive constriction there is a marked tendency toward stereotyped 
thinking in terms of oversinplified categories and reliance on 
oversiitplified decision rules'* (Janis, 1982:78). Two conditions appear 
to enhance the prci>abililY of hypervigilance occurring in stressftQ. 
situations: unconflicted inertia (or the failure to react to early 
warnings) and defensive avoidance (e.g. procrastination). Additional 
factors identified by Janis as associated with the antecedents of 
hypervigilance are the lack of contact with family members or other 
si^^port persons, lack of perceived control aid lack of preparatory 
information about potential stressful events. 
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a^xe prevention of "defective" patterns of response in threatening 
situations has focused in recent years upon several strategies 
iiicludii>5 "benign pree^qxisure to the threatening situation, stress 
inoculation via preparatory cannronications" and various types of 
relaxation techniques designed to mitigate physiologic reactions 
(Janis, 1982:82; see also, Janis et al*, 1982). Research on these 
techniques and the extent to which they are successful lander specific 
circumstances continues. Extrapolation to situations likely to be 
encountered in space stations must be done carefully. Some techniques 
may be effective for single stressors, but less effective in the face 
of multiple stressors. Again, further reseaixh is needed. Certainly, 
hcwever, this research gives us scare clues as to problems associated 
with decision-maldng in hi^y stressful contexta 

A comment on the Limits of Medical and Psychological Models of 
Stress: The imderlying framework a researcher adc^jts to the analysis 
of a problem often circumscribes both the natuire of scientific inquiry 
as well as conceptions of potential solutions. Thxas \t is not 
surprising that medical research on stress tends to examine primarily 
physiologic response patterns and the impact of dn:igs on the 
functioning of the individual undergoing stress. Psychologists 
similarly focus on cognitive and emotional factors, examining 
individual differences associated with cognitive appraisals of stress 
and reactions. Ihe solutions they consider include biofeedback, stress 
"inoculation", and various types of individual training and therapeuti-. 
tiidl}Pl:pBS. All of this researdi is necessary since the problem 
entails both physiologic and psychological diinensions. What is 
nissing, hcwever, from much of the current work is the investigation of 
the system properties of stress and examination of solutions to the 
problems created by multiple stressors at the grcsjqp or collective level 
(also scanetin^ called the qrstem level) . Inquiry of this type would 
examine the interpersonal dynamics related to stress responses and 
adaptive strategies rather than treating the problem purely from an 
intraindividual perspective. Adoption of an interpersonal or system 
level perspective would lead to quite different conceptions of adaptive 
mechanisms. In Connors (1985:146) words, "Given that future missions 
will require increased levels of cooperative functioning, solection and 
training procedures must not only yield effective individuals, they 
must yield effective groiqps." 

Hie dcaninant characteristic of space station missions in the near 
future involving 6-8 crew nvenibers marooned in space for approximately 
ninety day intervals of the hi^ degree of interdependence among the 
gxxxxp members (and possibly between groi:ps in different modules at some 
poiiit) . stressors which significantly inpact any single gxoap member 
will.^ of necessi"b^, influence group functioni:jg---^en if it sinply 
entails the reassignment of duties or tasks for brief periods of time 
or teitporary isolation of a groap member. In addition, grotp m^mbern 
may be impacted similarly by stressors and thxas ccllective solutions 
should be e55)lored. Strategies mi<^t be developed, treating the group 
as a social system (as Michener does) of interdeperxient parts and group 
msnibers mi^t be trained in specific response patterns throuc^ a 
division of labor. For example, roles could be assigned such tliat each 
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attends to a specific problem a-^sociated with inefficient 
decision-anaking imder hi^ stress. One crew meniber mic^t be assigned 
the task of vigilance with respect to only alternatives, another to 
Icaig-tenn consequences, etc* and coordination mic^t be achieved either 
by an assigned gro^ leader or some sort of conpateilzed decision-aide. 

Ooaipiter-aided systems could be da7elc^)ed vMch help to ineliorate 
ocsraraon deficiencies observed in cognitive processing during peak 
periods of stress* Coping strategies of this t^pe are more like Janis' 
sug^stion that an appointed "devil's advocate" be used to mitigate the 
negative consequences of "groi^rtaiirik, " Oliey have the possible advantage 
that "failure" is not localized in a single individual (typically, the 
"leader") \Aio mjst assume full responsibility for group decisions in 
"crisis" or intensely stressful situations. Furthermore, a clear 
division of labor also reduces the workload on any single individual 
under stress. TJie work on distributed decision-making by Fischhoff and 
others may well provide nodels for this type of coping mechanism. 
Relevant work on corrputer-aided decision-making should also be 
explored. 



Mediators of Stress and Adaptation 

In the won3s of Holrpyd and Lazarus (1982:25) , "It has been 
increasingly acknowledged that health outcomes are a product of 
effective coping rather than siitply a consequence of the presence or 
absence of stress." Identifying factors that result in effective 
coping is an iinportant researcih agenda item, however current 
invesLi-gations focus more on drug therapy, biofeedback and 
"cognitive-behavioral" interventions to modi^ responses to stress and 
facilitate coping. Ihe social and organizational management of stress, 
as noted above, has not been examined. Psychological approaohes take 
us one step beyond physiologically focused management strategies, but 
even they have not been evaluated extensively. 

C5opii^ mechanismr and adaptation responses form one axis of current 
research, the second axis is extensive work on factors that "nvediate" 
the stress response. Suoh factors include individual differences vMoh 
i^ate not only to susceptibililY/ but also to cognitive appraisal and 
effective coping. Variables incorporated into these investigations are 
ethnicit^/ age, gender, occupation, income, level of education, marital 
status, health status and access to social support (i.e. personal 
resources and network si^jplied resources) , among others. Access to 
social si??portp for exaitple, has been demonstrated to mitigate sane of 
the effects of stressful events (e.g. Caplan and Killilea, 1976) . 
Much of this work is xaseful for general medical and scientific 
purposes, but caution must be exercised vdien atteitpting to generalize 
these findings to astronauts and the space station environment. The 
range oi variation on some of these variables is quite rei^tricted in 
the astronauu population, althou^ increasing heterogeneity must be 
assumed along many of these dimensions (i.e. gender, age and 
ethnicity) in the future. 
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Researcil lirfcing gendar to stress, for exairple, indicates in a 
variety of studies that wcfftoi are itore susceptible to stress (e.g. 
Kessler and McORae, 1981) ; given certain levels of stress they r^rt 
hi^er levels of distress as reflected -b^ically in syirptcaxatology 
(primarily self-reports) . Research discussed by Kessler and McLeod 
(1984) documents that vmen tend to be more affected by undesirable 
life events than roen even thoii^ they do not report significantly more 
such events. Kessler and McLeod (1984) piresent findings that indicate 
that wcaoaen are more vulr^rable to "network" events, events that happen 
to significant others in their networks, than men, and it is this 
difference that accounts at least in pai± for previously observed sex 
differences in responses to stress. Ihus, they argue that women are 
not "pervasively more vuli^rable than men to stress." but vulnerable 
specifically to stress linked to the iirportant peoi^^/e in their lives as 
a result of their "greater emotional involvement in the lives of those 
around thern^, " Belle (1983) refers to this fact as the "stress of 
caring". 

Ihere are many xmanswered questions concerning the link between 
gender and stress. Uie extent to vMch female astronauts are more 
vulnerable to stress than male astronauts is an open question. Few of 
the existing studies include in their sairples women in such hi^ stress 
occi:5)ations and it may well be that women with hi^ capacities for 
coping with stress self-select into these occi:55ations (e.g. as is 
likely the case for women mountain climbers) . It should also be noted 
that many of these studies reporting sex-related stress differences are 
based on sairple data obtained in the 1950s, 1960s and early 1970s; 
little evidence exists based on more recent data including saitples of 
women in more varied occi:5)ational contexts and roles. 



Brpact on Productivity: Individual and Groijp-Level Effects 

The link between stress and productivitY h^is been demonstjcated to be 
somevdiat coitplex. Mandler (1982:94) argues that "the problem of stress 
is twofold; both the initial autonomic signals and the conditions that 
generate these signals irequire sam conscious capacity. . .and therefore 
interfere with the performance of targeted tasks." What is not clear is 
specifically how and under vfliat conditi.cr.s performance is inpaired. In 
fact, as Mandler (1982:96) indicates, IJke noise, stress reduces 
"attentional capacity and narrows it to central tasks," thus if the 
target task is central, "then autonomous arousal may intprove 
performance. " Hds depends upon both the centrality of the target task 
and specific characteristics of the task, or task s^equence vdiich 
requires performance. Early research on this t jpic seemed to suggest 
that there is a curvilinear relationship betwer ii arousal and 
performance such that performance is enhanced by moderate levels of 
arousal, but impaired significantly at both very low and very hi^ 
levels of arousal. Ihe generality of this effect is still under 
debate. Mandler (1982:95) concludes that "understanding the relation 
between efficiency and stress requires an analysis of specific 
stressors, an approach to arousal that assigns it definable 
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proi-^erties. . . , and toicwledge about the requirements of the task." 
Research by Bac3deley (1972) and others indicates that stress associated 
with dangerous environments "affects perfonnance throu^ its influence 
on the subject's breadth of attention. . .but we still do not knew what 
nechanisms mediate the effect of arousal" on attention span or even 
what is entailed in the adaptation to fear. 

Evidence suggests that problem-solving abilities are affected by 
stress in much the way Janis indicates that decision-making is 
iirpacted. In particular, "if mudi of problem-solving involves the 
manipulation in consciousness of alternatives, choices^ probable and 
possible outcomes and consequences, and alternative goals," then stress 
ints *".res with efficient prdDlem-solving. Few alternatives are 
actuc ily considered and the thou^t process is guided more by 
habituation and stereotyping than by the conscious wei^iing of 
alternative strat^ies. What is needed, he argues, is "fir^-grained" 
analyse of these processes. "Ereoccipation with the unstressed mind 
has restricted e55)eriinental work on these problems" (Handler 
1982 : 101) . A related shortcoming is the failure to consider the social 
conte>ct of problem-solving behavior. Ihe bulk of the researd* deals 
with individual tasks, not collective or hi^ily interdependent tasks. 



A Research Agenda: System-31evel Responses to Stress 

In the previous era vAien hi^y trained male pilots were selected as 
astronauts on the basis of physical stamina, hi^ tolerance for stiress, 
psychological stability and technical ccarpetence for space missions 
involving relatively short-term exposure to inultiple stressors in 
dangerous environments, less attention was paid to researxih on stress. 
In fact. Handler (1967) rested in his early studies of hi(^y trained 
astronauts a lack of anticipated stjress responses; these men had been 
"trained to have available response sequences, plans and 
prdblemrsolving strat^ies for all imagirable emergencies" thus 
emergencies were transformed into "routine situations" and therefore 
not esqperiencoi as stressful. At this stage in the space program 
endurance was the primary focus of both selection and training. Even 
space capsule design decisions were not frequently made in order to 
mininize eirvironmentally induced stress or to increase "habitability" 
(Clearwat:er, 1985) . 

Die future holds forth a different scenario. First, astronaut 
selection procedures have changed to include non-whit:e males and 
scientific personnel as well as pilots. Ihere is greater diversity 
among potential astrcmuts in occipational t:raining, gender, age, 
ethnicity, and personality trcaits. Given this het:erogeneity and the 
increased conplexity and duration of space station missions, enphasis 
must new be placed (as Helmreich, 1983; Foushee, 1984; and other social 
scientists have argued) on the selection and training of hi^y 
coKpatible crews especially as group size increases to ei^t or more in 
iBlatdvely small modules. In addition, only recently has habitability 
became an integrated aspect of the space station design process. 
Alterations in selection processes to maximize crew ccarpatibility and 
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design decisions to iirprove habitability are esr=5ential ingredients. 
But as Danford et al. (198:i) note in their chapter, "Humane Space 
Stations", social and organizational factx>rs mist also be considered. 
Two specific factors have been isolated for consideration in this 
paper: (1) the social manageraent of stress and develqpnent of 
interpersonal coping laechanisms, and (2) the socially efficient and 
productive management of interpersonal comraunications. 

Develcpient of a specific research proposal is beyond the scope of 
this chapter, however, research recommendations to NASA would inclxade 
examinaticai of existing data on crew interactions especially under 
stressful conditions to isolate effective interpersonal strategies for 
coping with stress and to identify particular interaction sequences 
which either exacerbated or mitigated stress responses. These data 
should be examined in relation to individual performance, groip 
performaiK^ and interpersonal climate. Variation in interpersonal 
strategies by type and duration of stressors should also be 
investigated. In the early stages of the mission stressors may be 
predominantly jii^iological (e.g. resulting from space adaptation 
sickness or initial bodily responses to micro-gravity, etc.) , however, 
as duration of the mission progresses psychological and social 
stressors may became more pronounce (i.e. intensification of the 
sense of isolation and confinement, monotorr/ of the physical 
environment, and increased sensitivity to interpersonal 
inccatpatibilities, etc. ) . Ihe most promising data sources for such 
analyses are likely to be tapes from the Skylab Missions given that 
they provide some insist into flicpits of analogous duration to planned 
space station missions. 

Another ;:iseful focus of research would be investigation of group 
decision-making imder stress. Existing data could be mined for 
insists into the impact of stress on predicted cognitive and 
behavioral responses (e.g. the possible occurrence of hypervigilance) , 
in decision-maldng situations of varying types. A separate research 
strategy would be to simulate group decision-making xinder stressful 
circumstances. One model for this type of research is the work by 
Foushee and his colleagues (e.g. Foushee and Helmreich, forthcoming) 
on crew performance vmder stress in aircraft fli^t simulations. 
Again, the aim would be to identi^fy successful interpersonal strategies 
for coping with critical deficiencies resulting from stress. One 
potential byproduct of this research would be identification of the 
characteristics of computer decision-aides -^^Mch would facilitate group 
functioning lender conditions of hi^ task interdependence and hi^ 
stress. Information-seeking behavior, for exairple, could be isolated 
and analyzed for inefficiencies vMch could be meliorated by the proper 
use of e)5)ert systems or computerized search procedures. As Nickerson 
concludes in his chapter, "Stress is likely to be an important factor 
in the Space Station... Exactly how these factors, especially in 
combination, will affect performance axxi productivity is not known." 
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MEDIATED OCS#IUNICaTION AND CREW ERDDUCTIVnY 

In a 1983 NASArASEE final report entitled "AutonoriQr and the Human 
Elenent," the authors state that the "general transmission and 
processing of information lies at the heart of almost every aspect of 
space station activity. " Over the past decade information processing 
and coaoornunications have engaged more and more of the design 
capabilities of NASA both in terms of hardware and software development 
efforts. Rapid advances in technology make this aspect of space 
station design especially volatile and vulnerable to obsolescence. 
While cost understandably plays a major role in design decisions, other 
factors affecting crew morale and productivity must be taken into 
account. Ccaiimunication modality is also a critical factor in the 
coordination of activities aboard the space station. An intjensive 
examination of the benefits and disadvantages of different modes of 
conraunicatiion for within crew interactions, as well as for int:eractions 
between crew members and "ground" or mission control personnel, and for 
drew interactions with significant others is required, ^^^rale, 
efficiency, productu.vity, the potential for conflict, the exercise of 
authority and control, and, ultimately, mission "success" are all 
2if fected by communication modality, access to information, aixi the 
stnnicture of the communication channels. 



Carrpiter^fediat:ed Communication as Primary Modality 

As Connors et al. (1985) put it "mediat:ed communication systems must be 
develc^jed to meet the needs of the crew throu^out an extended 
mission." Such communication systems are not only vit::al to the ongoing 
mission of the space station, but may also be critical in maintaining 
social contact between stiation crew and ground personnel and thus 
contribute t:o the reduction in stress created by the sense of isolation 
and confinement. Maintenance of good communication links between the 
ground staff (e.g. "mission control" and other base qperations) and 
the members of the space statdLon crew are essential to the smooth 
functioning of the space stiation. Currently, one of the primary 
modalities for communication processes is coitput:er-medlat:ed int:eraction 
(Simes and Sirsky, 1985) . This section of the chapter iroliodes a brief 
review of some of the relevant research on the impact of computer 
mediation on group int:eraction and decision-making. Other modalities 
for mediat:ed coraraunication are mentioned; however, cost factx)rs 
necessitatie heavy reliance \jpon ccatpiter^mediation. 



studies of the Effects of Conpitzer-mediated Int:eraction 

Siegel et al. (1986) , in experimental studies contrastijnq the effects 
of face-t»-face versus ccortputer-n^diatied communication, find that with 
certain types of group problem-solving tasks there aie marked 
differences between commurdcation modes. Three types of communication 
nodes were examined in tlae studies they report: face-tx>-face. 



347 



342 



simultaneous ccmpi::e3>inediated discussion and coirputer mail. While the 
results are not definitive, they suggest that communication mode 
affected the speed required to reach a groip decision, the equality of 
participation rates of jroap members, ccarattunication rates, nature of 
the interpersonal coraraunications, as well as the degree to vSiich the 
groin's decision deviated from individual's initial d-ioices. Ihe 
results indicate that there are certain advantages and disadvantages to 
conoputer-mediated comraunication systems vMch are relevant to plans for 
space station ccanmunication^, althou^ more systematic research is 
required. 

Specific results of interest include the fact that conpiter^mediated 
simultaneous comraunication appeared to retard grouop decision-making 
vdien ccaitrasted with face-to-face comraunication. In acSdition, this 
mode of communication fostered greater equality in participation rates 
among group members, increased the number of inflammatory or 
"uninhibited" remarks and resulted in groiqp decisions which deviated to 
a greater extent from initial individual choices than was the case vhen 
ccramunication was face-to-face, (it should be noted that the subjects 
who participated in these groi:ps had no prior association vath one 
another. ) Findings from the condition in vnich subjects coraraunicated 
by conputer mail were similar in most respects to the coitputer-mediated 
"conference" mode. 



Iiiplications for Space Station Qsmraimication Systems 

The iitplications of the findings of Siegel et al. (1986) for 
decision-making and groap problem solving aboard the space station are 
intriguirg, thou^^ speculative. First, it would appear that conplex 
problem-solving task«i, especially when time to solution is critical, 
are facilitated most by face-to-face coraraunications even though this 
modality increases inequality in participation rates. The role of 
video connections in approximating face-to-face comraunication ^ere 
physical ccpresence is not possible (as between crcj members and family 
members or belween crew members and mission control) has yet to be 
fully investigated. Limited research suggests that video contact 
(vMch is available to both parties) reduces perceived "social 
distance," but the role of perceived social distance in conplex groip 
problem-solving is not clear. Research varying both the catplexity of 
the task and the degree to viiich face-to-face contact is mediated is 
needed. 

ilesults concerning the effects of communication mode on 
participation rates also requires further investigation in relation to 
task ccraplexitY and degree of task interdependence. The greater 
equality in participation rates fostered by conpiter-mediation may be 
functional for tasks requiring creative solutions (or during the 
'"brairistorming" phase of group problem-solving) vdien maximization of 
irput is essenticil. Ctoitputer-ii^diation may also mitigate to some 
extent the effects of status differences on participation rates (a 
well-established finding in the small groips literature, see Bales work 
on the link between status and power and prestige orders and 
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participation rates) . ahau<^ the f irding concerning the impact of 
canpiter^inediation on participation rates and its iitplications for the 
reduced effect of status differences is speculative, it certainly 
requires further investigation. Studies in vMch clear status 
differences exist among group menibers need to be conducted in 
compputerized settings* QDrrpiter--inediation my facilitate the "i:pward 
flow" of negative information or information that challenges the 
positions of thc^ in hi^ status roles in the gro;:^), This effect is 
iirportant since x:\nder time pressure or in stressful situations 
information is often critical to effective decision-making. 
E)qperjiftental research and simulation studies could be conducted on this 
topic • It appears that coitpiter-mediation may mitigate the inhibiting 
effects of face-to-face communication ii*ien "subordinates" have access 
to critical information and may need to challenge authority or the 
grocp's dominant decision strategy (see Foushee, 1982, 1984, etc*)* 
Connors (1985:174) , for example, cites research indicating that 
"correctable pilot errors have gone imcorrected becaiase of 
vmquestioning attitudes, a lack of assertiveness, or deficient 
communication skills •" Another intriguing result cited by Connors 
(1985:197) was obtained by Chairpness (1971) indicating that people are 
more likely to change their established positions on issues and reach a 
conpramise with other groap members when communication is not 
mediated, This may have important iirplications for both the process 
and outcome of groap decision-making aboard the space station. 

Alterations in the norms surrounding communication content lander 
varying communication modes also need further investigation. The 
normative restraints of face-to-face interaction on communication 
content are lessened in the more anonymous condition in vMc±l coitputers 
mediate interaction. As Siegel et al. (1986) note, computer-mediated 
coonmiiunicatioiis included more inflammatory remarks. If this finding is 
observed in groi^js vMch have a history of interaction, then 
cortpiter-mediation could foster interjt^ersonal conflict and mechardsms 
to meliorate this possibility would have to be de/elcped. A related 
concern is the protection of privacy in eonmunications meant for family 
and friends, especially caimiunications hi<^ in socio-emotional 
content. All forms of mediated communication raise issues of access as 
well as privacy vdiich need careful examination in relation to 
individual morale, groip ccdiesiveness and other dimensions related to 
the interpersonal environment within the space station. Connors 
(2985:197) cites studies indicating that mecliated communication 
contains "reduced socio-emotional content," aiid thus is less effective 
for certain types of tasks such as negotiation or gettir^ acquainted in 
contrast to tasks vdiich require "the giving and receiving of 
information, asking questions, or exdianging opinions." Research on 
space station communications and the impact of canputer-mediation on 
the performance of different types of tasks, as well as the nature of 
the interpersonal (J/namics within the crew and between crew and ground 
is needed. 
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Individual and Groip Level Inpacts of OoonopiberHMediated 
Clararnunication Networks 

Kerr and Hiltz (1982) discuss the potential iirpacts of 
ccaipiter^2Bediated on individuals and groups focusing on 

cognitive, affective and behavioral dimensions. Ihey are concerned 
with broad effects at the organizational and societal levels, many of 
vMch go far beyond the scope and size of the space station. Some of 
the hypothesized effects have been verified in research discussed above 
by Kiesler and her colleagxies (Siegel et al., 1986) , but many of the 
topics raised by Kerr and Hiltz have not been subjected to systematic 
research. Furthentore, much of the evidence thay cite is anecdotal, 
based on the e)$>eriences of those in positions to evaluate existing 
cortpiter-ii^diated ccorammication networks. Ihou^ ocarpitei>mediated 
coraraunication networks of various sizes have existed for at least a 
decade, research examining the effects on specific variables related to 
groap functioning and orgardzational effectiveness is fairly recent. 

With respect to iixiividu^ performance, Kerr and Hiltz (1982) 
discuss such issues as infontation overload, new skill reqiiirements and 
iiiprovements, e>$>ansion of learning opportunities, etc. as potential 
cognitive inpacts of ccoftputer-mediated communication systems. 
Hypothesized affective impacts include: enhancement of the candor of 
opinions, potential "addiction" and heavy usage, increased network size 
and possible sources of social support (from kin, friends, and 
professionals) , the ability to maintain friend^ps despite lack of 
geograjdiical praximity, etc. Negative potential consequences discussed 
include increased isolation from non-mediated communication relations, 
na7 sources of stress related to changes in existing patterns of work 
and communication as well as alterations in social networks, and the 
frustration created by the lack of iratediate feedback, etc. Hiltz 
(1979) , however, notes that in some cases, "The desire to have truly 
synchronous conferences seems to almost totally disappear as ejperience 
is gained on the ^tem." 

Of the individual-level behavioral inpacts discussed, several are of 
primary int^erest. First, it is clear ttiat conputer-mediated networking 
increases connectedness among individuals thus expanding the sccpe and 
range of social relationships. According to Kerr and Hiltz (1982:114) , 
corrputer-mediated communication systems lead to "increased collegial 
contacts, an increase in the number of contacts that can be maintained, 
and create the opportunity for regular connections with many people." 
Expansion of the actual or perceived social network throu^ 
corrputer-mediated communication systorts may help mitigate the sense of 
isolation eoqperienced by space station inhabitants. Results indicate 
that a major strength of such systems is the ability to "keep in touch 
with others" (see Kerr and Hiltz, 1982:114, Val3^=^ et al., 
1978:111-115) . In addition, such systems seem to alter the centrality 
of individuals by allowing those geographically (or for other reasons) 
on the periphery to regain a sense of centrality through increased 
coiniriunication contact. 

Groip-level iirpacts are especially relevant to space station 
design. Kiesler 's work addresses some of the issues related to groip 
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decision-inaking contrasting cxarputer^ii^diated cmmunication vdth 
face-to-face groips. However, Kerr and Hiltz (1982:121-122) identify'' a 
wide range of other groijp and organizational level iirpacts, some of 
vMch correspond to Kiesler's concerns, The groip-level hypothesized 
cognitive inpacts inclxade: (1) the creation of "on-line" groi:5)S or 
"cooMunities of interest", (2) iitprcfved groiqp decisions, and (3) an 
increase in "Jaxwledge-based aiithority," etc. With respect to groap 
decisiais, the findings cited are mixed. On the positive side results 
suggest that the capabilities of data base searches, increased access 
to information and access to decision-aides enhance groap 
problem-solving and decision-makii>g. As Turoff and Hiltz (1980:123) 
indicate "the cortputer can aid in gathering subjective estiitates within 
a groi?)" and facilitate the resoliition of disagreeittents. 

Whll.e Ksrr and Hiltz (1982) indicate some ertpirical sv^jport for "at 
least the same quality of solxition" when coitparing coitputer-mediated to 
face-to-face groups (Turoff, 1980; Hiltz et al. 1981) ; Kiesler et al. 
(1984) and Siegel et al. (1986) report a decrement at least with 
respect to time to solution for the conputer-mediated groups. Others, 
Ksrr and Hiltz (1982) note, (see Johansen et al., 1979) argue that more 
conflict may result from the increased access to alternative views and 
that a "false sense of groip consensus" may arise (Kerr and Hiltz, 
1982:125). 

On groi:p problem-solving Kerr and Hiltz (1982:124) cite the work of 
Lipinski et al. (1980:158-159) which suggests that when considering, 
the "task-focused ccgprammcations required by groups involved in joint 
problem solving, ccnputer-based coorariunication systems are appropriate 
in the structuring, evaluating, and documenting phases of problem 
solving, since time delays are acceptable, written responses are 
appropriate, and face-to-face contact is not essential." However, they 
go on to state that the "iirplementing, searching, and conceptualizing 
stages of problem solvix^g aire less amenable to this technology. " Viore 
research is needed concerning the phases of problem solving and the 
effects of conputer mediation. 

Ihe follwing list includes some of the hypothesized behavioral 
iitpacts on groups identified by Kerr and Hiltz (1982:132-133) . Maiy 
have not been sufficiently investigated to provide definitive 
evidence. (Adapted from Kerr axvi Hiltz:) 

1. C3offtputerized coraraunication increases cross-g3X)up communication. 

2. It increases lateral network linkages among organizations. 

3. It increases lateral network linkages within organizations. 

4. Conputerized coraraunication may change social structures from 
pyramid or hierarchical to network-shaped. 

5. It changes the centrality of meirtoeirs within groips. 

6. It increases the possible span of control. 

7. It can increase the effective limits on the size of v/orking groups. 

8. It increases the density of social networks, increasing 
connectedness. 

9. It increases opportunities for decentralized coraraunication. 

10. Conputerized coraraunication may increase infonnal coraraunications. 

11. It changes viho talks to vdiom. 
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12. Groups take longer to reach agreonaent and consensus is less likely. 

13. Qxtputerized ccinraunication sometiines makes it difficult to focus 
discussions. 

14. Regularity of iiidividual participation is sametiines difficult to 
enforce. 

15. There is greater equality of participation than in conventional 
iDsdia. 



Octtnraunication Network Structure, Centrality and Power 

Prior researdi on ooraraunication networks in the social sciences 
provided evidence that the specific configuration or structure of the 
network affected the efficiency of problem solving groaps. But more 
recent research tends to indicate that these results may not be valid 
for mediated ocanmunication systems. Subjects in various four-person 
network structures, given tele^ione contact capabilities, were able to 
ccane to consensus on groip decision problems without much variation in 
degree of consensus cr time to achieve consensus across structures (see 
Priedkin and Cook, 1987) . Results frcm tht^ copipiter-mediated version 
of this ejqperiment are not yet conplete. 

Centrality has been linked to power in various studies of 
coraraunication and in networks in vhich resources other than information 
are exchanged (see Freeman, 1979; Cook et al,, 1983), In 
coitputer-mediated coraraunication networks centrality is linked to access 
to information and control over the flow of information. To the extent 
that conpiter^mediation alters these parameters decentralization of 
power may occur. Research is needed vhich examines the relationship 
between the structure of the coraraunication network and control over 
information channels. Certainly as Kerr and Ililtz (1982:150) indicate 
"opportunities for decentralized coranunication are increased" in 
conpiter-mediated networks, "because it is easier to keep all those 
concerned with issues informed and to date." Thus the efficient 
flow of information is enhanced. But a^ficient decision-making in 
groi:5>s in \Aiich coraraunication is coirpiter-mediatcd may require 
structured access to information rather than qpen access during the 
final stages of decision-making. Levels of access to information 
rather than the evailability of coraraunication channels becomes the 
critical determinant of positional centrality and thus power in this 
circumstance. Further re*>earch on these topics is needed. 



Coraraunication Networks, Authority and Control 

Kerr and Hiltz (1982:125), among others, predict that conpaterized 
coraraunication increases the "appreciation of knov;ledge-based rather 
than hierarchical authority," if this result is general, it will be 
iirportant to study the conditions under vhich conflict can arise 
between knowledge-based aixi hierarchical authority structures. 
Efficient groi?) functioning and problem solving is likely to be 
enhanced \*ien Uiere is minimal conflict between these sources of 
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authority. Furthermore, hierarchical authority and coramand systems 
ittust be designed in such a way that infonnation flew is not ti^tly 
hierarchically structured. 

As noted above, in particular, in systems involving hi^y trained 
professionals the \?3ward flow of critical infontation inust not be 
circumvented by bureaucratic procedures or restricted coianunication 
channels. Maodmization of groi:p productivity and problem solving 
efficiency is likely to occur under conditions of open access to 
coinraunication channels rather than strict hierarchical access under 
conditions of corrplex tasks, hi^ xmcertainty and a hi^y 
professionalized staff. Specific research on optimum alternative 
authority structures under varying ccoratiunication network structures and 
task conditions is required. 

With respect to authority and control in sysfcsms iising^ 
corrpiter-iftediated commanication networks, two additional iitpacts cited 
by Kerr and Hiltz (1982:150-151) are relevant. Ihey argue (p. 150) 
that "greater delegation of authority is possible with the capacity for 
accountability and reviewing decisions in a timely and orderly 
manner." Second, th^ argue (p. 151) that it "increases the possible 
span of control" and "allows itore centralized control over 
geographically dispersed units." Oonputerized decision-aides have the 
potential to alter both accountability and review procedures, but the 
specific extent and optimum role of these systems in human 
decision-making has yet to be determined. 

Extension of the span of control and the degree of centralized 
control over units dispersed in space may beccitie more irtportant 
considerations during the post-IOC phase of the space station program. 
Some of these issues as they relate to the potential for intergrocp 
conflict have been addressed by Michener in his chapter in this volume. 



Hie Impact of Conputer-^fediated Interaction: Research Needs 

Research on the ircpacts of ooirputer^mediated interaction on individual 
and groi:qp-level fi:Jictioning is relatively new. There are major 
limitations to existing knowledge in this area; results are more often 
based on anecdotal reports than systematic research or are derived from 
very limited dDservations over limited time spans in situations in 
vMch there is little control over the relevant variables. A major 
research program is required. Of particular importance in the design 
of space station configurations and ccatmtanication systems is research 
on the links between information access channels and the exercise of 
authority and control. Various factors make the space station unique: 
the hi^ degree of professionalization of the staff, the camplexi.ty of 
the tasks involved, the hi^ degree of interdependence and uncertainty 
surrounding many of the tasks to be accomplished, the enormous 
information requir^anoits, the difficulty and complexity of continual 
on-line monitoring, the spatial separation of the ground-based crew and 
command personnel from the space crew, and the potential existence of 
multiple authoritY structures. 
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E>dsting researdi is focused on earth based ccanmunication networks 
primarily among colleagues or remote members of interest grams ^\ere 
tiiQ excise of authority is rarely an issue. Information exchange is 
frequently the prajnary or sole goal of the interaction. Thus 
extrapolation from the results of studies on these networks must be 
treated as highly speculative. New research must be designed artjund 
the specific problems and parameters facing crews in space. 
Siraolations could be designed vMdh would mirror some of the most 
^itlcal circumstances and used to evaluate alternative network 
strucbares, ^stois of controlled versus open access to information, 
given differ^ types and levels of complex tasks. Pixiblem solving 
efficiency and groi^ productivity would be a primary focus of the 
r^earch, althoi^ other issues such as increased social comraunication 
between crew merobirs and ground personnel would also need to be 
addressed in terms of the impact on mission success, broadly defined. 
Priority should be placed on the development and evaluation of on-line 
data a3llecrt:ion systems for post-IOC space station missions and other 
long-duratipn, "manned" missions concemijTg the multiple iiroacts of 
cxatpiter-mediated communication systems. 



Summary Statement Concerning Research Needs 

The 1986 Challenger disaster was as much a failure in organizational 
^^i'SEif^f ^ technical failure in the ri^t rocket booster on 
tte ^luttle. TMs fact attests to the tendency in organizational 

S^nJ?Lf f ^^^."^^^ ^ attention priatarily on 

Slif^iS "^^fP^.?^ ^ ^ial aspects of 

^st^. design. Historically, Ln the social sciences, as well aTthe 

S^i^ff f P^'^vity has been viewed fundamentally as a 

^^em of technical system or organizational design aud innovation. 

vdio design and evaluate complex systems vMch require human 
S^Kw?' ^ eventually recognize the significant role 

of psychological and social factors in prtxJuctivity. Human factors are 

fairly small beginning given the time frame within vMch researx± 
commitments are necessarily made. 

W reOTendations assume that technical and social systems can not 
SoffSc.'^^.'T elation of one another and that interdisciplinary 
r^eaixh^which crosses the invisible boundary between the physical and 
social sciences is required. Designing space stations whidi are 

JlSSSS^Jf ""S^^? ^ "^"^ optimize human comfort, satisfaction and 
productivity and muumze the sense of isolation and the stresses 
ass^iated wi^ risk and uncertainty, as well as the potential for 
tot-^-gro^ and inter-groi^ conflict is as critical a goal as the 

SrilSe'^oft"?^ ^^"^^ "^"^ ""^^^ P"^^^^ technical support 

n«*.^^S?f?!i°'' critical aspects of social system design is simply 
not available. In part this is because the technologies under 

? ^ computer-mediated networks to facilitate 

interpersonal communication are relatively recent) ; but also in part 
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this state of the a2± is a function of national priorities and 
bixagetary constraints. Hopefully, this situation will change. The 
quality of life in space in the twenty-first century will hinge upon 
decisions we make during this decade as to vdiat research is necessary 
to maximize not only productivity, the bottom line for many, but also 
less tangible qualities such as habitability, sociability and 
liv^ility. Ohe space station is, after all, a place to be inhabited, 
a inini-society vMch at uxwe not too distant time in the future must 
begin to cope with not only the technological requirements of its 
envircninsnt, but also the psychological and social needs of its 
iriiabitants and the social constraints and reqiiirements of an emerging 
society. Eecruitment, selection, training, f5ustenance and replacement 
of persons will be as critical as the maintenance and replacement of 
parts. 

Olie following is an abbreviated list of research needs (see Table 1) 
\Aiich I have suggested In the text of this report related to social 
factors involved in space station design during tlie post-IOC phase. 
The ertjiiasis in this r^rt has been placed on issues related to 
stress, its causes and consequences, and the inpacts of 
coaiputer-iaediated ccammunication systems (since that is currently the 
primary modality envisioned.) I have only scratched the surface. 

In concl\:ision, it is Important to note that as with many of the 
research programs of msk and University-based scientists, the benefits 
to be derived frm the proposed research extend far beyond the limited 
purposes of future space station missions. Improved methods for coping 
with multiple stressors in hostile environrnents and a better 
understanding of the social and psychological effects of 
coKputer-mediated ccBoninunication systems have great potential 
applicability In a wide range of human social contexts. The payoffs 
for society as we know it on earth are potentially even greater than 
the payoffs for life as ^ve envision it on space stations in the next 
century. 
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SSfnL^f^f^ ^'^ff? ^ Productivity on 

loig-Diraticsi Spsoa station Missions 



Social stress, HUnan Productivity and Grtx?) p\mctioning- 

(1) Dsvelpp mare ocn^idiensive and precise measures of stress levels for 
situations lnvolvl»j nuLtlple stressors. 

(2) ResGMch and develcp stress mcnitorlug systems, cti-line data collection 
procedures, and mora uncbtrusiva measures of stress. 

S^Sf personal characteristics (e.g. personality dimensions, 

^ ^^4° responses to stress and adaptation^ to stress m 
icjng-auraticn cpau^e station missions. 

J^^m^ff^^^^l''^ ^ °^ Multiple stressors on Individual 
and grojidecislon-saklng processes. Assess the effective, as of differt^nt 
ocping strataglfis and decision aicSes under varying levels of str^ aS^ 
ocDblnatlcns of stressors. 

(6) Bgard research on the causes of stress to Include as well as psydxjloaical 
and Fhyslnlogioa factors social factors soA as group size, 
ocnpositlcn, di'/lsion of labor, warkload, pero^ons of equity jb^ the 
assignments of tas3ffl and re^xaislbllities, styles of leadSshS. typTand 

^7^ Sr^f hS^'* "^"^ sl^icant others, ^. on lon?Sl« 

(7) Begin to develop process «odels which relate stress to individual 

S^fS'^^ °^J!^iTi.*?^°^ ^P^fy ^ conditions under 
vMA^the^^ipairfflent of individual performance seriously coopranisesgroup 

^ut^^fedlated Oanmmicaticn Systems, Human Productivity and Group 

(1) Ejctend ejdstlng research on the social Impacts of ccnputpj^nediated 
ooraiw^tion systens on individual decislcn-maJcb^ and graap prcblem 

(2) IrivestJj^ the effects of occprt-er-medlaticn in relation \o the phases of 

S'XfSf!.^^?^' of the tasks and variatiau In tiia levels 

of envirtDnmental stress and uncertainty. 

ooipxteMnediated ccnnnunicaticn systems and the 

r^^^H^ 2LP°^,"*^ authority. Investigate in particular the potential 

l^i toowledge-bised and hierarchicalauchority strSres 

lA^ fl^ link between oentrality and the exercise of power and InfluenoeT 

^eta«m crew neuters ard significant others on earth attendli^ to Issues of 
privacy, social support and the effects on responses isolation, 
confinement and other stressors on space station missicns. 

(5) In the fUt^, research the differential Irpacts on indiv<dual performance 

I^T^ZfT^"^ ?5 ^ °^ laediated camunicaticrsystems 

(including audio and video channels) . 

(6) Examine facton; related to octsnunication madality and access to 
conmnicatlon channels v^ch inhibit the upward flow of critical infonnation 
(^lally negative Infonaticn) and sachanisms which circSStlhS^ 
prcolem. 

(7) tonslder the effects of cai5wtei>inediated cominic^tion cn the relations 
between crw menbers and ground personnel and between crews of i^fferent 
mo^es with respect to the potential for intergroup conflict and develop 
mechanisms to mitigate conflict. uevfjxop 
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CXDNTROL, CJONFIICr, AND CRISIS-MANAGEMENT 
IN THE SPACE STATICSN'S SOCIAL SYSTEM (YEAR 2000) 



H. Andrew Michener 



THE SPACE STATION'S CREW AS A SOCIAL SYSTEM 

This paper discusses the organization of the cr^ on board NASA's Space 

^ °f sells and GundeSon 

(1972) , the perspective adopted here is that the crew of the Space 
Station isnot Dust as a collecticr of pecple but a functioninTsocial 
^st^. Ciew inenibers are viewed ^t just as individuals, but as 
interdependent parts in a larger structure. 

fn>^"^iSfS?^ Space station will evolve fmn its earliest 

form (called the Initial Cperating Configuration, or IOC), i-Mch will 
^ist agroxiinately in year 1993, to a ccaiplex form (herein called the 
operating Configuration, or SSOC) in year 2000. in the loc 
(1993), the crew of the Space Station will be small (i.e., 6-8 
persons) . As the Space station evolves over time, the crew will qrow 
in size and by SSOC (2000) it will have grown to'20-30 pers^Ji? 

the cr^ as a system even vta there are 
nSfio ^ ^ However, it becomes increasingly 

useful to view human relations in system terms to thete are more 
persons '^n board, as in SSOC. 

NASA has traditionally placed great emphasis on careful selection 
^z.^^^""? 2^^ili^°^ ^ outstai^ performance of 

^iS^n^-S^i^"^ to the success of this approaS.'l^iection 
and training will continue to play an important part in IOC and SSOC 

S^T^S°cc^^o?"^:,/^^^^^' ^ Space station evolves 
from IOC to SSOC, NASA will find that it must rely less on selection 
and more on intentional design of the on-board social system to achieve 
adequate pcrforma^ This will occur bec^ the g?SX^ 

ill size wi\l render the crew increasingly less a collection of 
indivic^s and increasingly more a system with emergent properties. 
STfL?^ f/olution from IOC (1993) to SSOC (2000) , iitpoitant changes 
will occur in the social system on board. Not only will the syst^ 
in^ease in size, but it will become differentiated into distinct 
subgroi^ and more canplex in structure. These evolutionary changes 
will not OTly affect the Space Station's performance, but also 
determine the types of problems and failures that occur within the 
social system on board. 
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Ihe main purpose of this paper is to assist NASA in developing ^ 
r^rearCT agenda for the SSCX: social system. It must be recxxgnized, 
however, that neither the IOC nor the SSOC social systems exist tocJay. 
Ihis means that research is prdblemati?, because thera is no way that 
one can directly observe these systems or take measurtaments on them at 
this point in time* Since the ICX; and SSOC social systems are yet to 
be developed, the essential question is not research, but planning and 
design — what shape and structure will these systems have and how will 
they function. Research becomes iiseful primarily as an adjiinct to the 
design problem; that is, it becomss useful to the extent that it 
iirproves some social system designs or eliminates some candidate 
designs from further consideration. 

To develc^ research ideas for SSOC, this paper first describes ways 
in vMch the SSOC social system will differ from the IOC social 
system. Next, it discusses three operating problems that may be more 
troublesome in SSOC than in TOC. These are (e) supervising and 
controlling the diversity of payload activities, (b) handling the 
relationship between differentiated subgroiqps of crew members, with its 
potential for intergroi^ conflict, and (c) responding to 
environraentally-iixiuced crises. Finally, some avenues of research are 
suggested regarding these operating problems. 



OCMPARING THE IOC AND THE SSOC SOCIAL SYSTEMS 



Social Systems in Space 

Social systens in space operate ixnder parameters different from social 
systems on Earth. These parameters, vMch apply to both the IOC and 
SSOC social ^tems, inclxade: 

(a) Perilous Environment. In contrast to most Earth-based social 
systems, the crew on board the Space Station (and on any space vehicle) 
will face a perilous environment (microgiravity, no oyq/gen) and require 
complex life-support. Crev; members will face significant hazards and 
risks to life. 

(b) Relative Isolation. The social si^stem on the Space Station will 
be isc^lated from other social systems and (in many respects) self 
contained. It will be in contact with Earth only via 
telecommunications, and hence it potentially has some degree of 
independence from Mission Control on Earth. 

(c) Long Duration. The social systems on board the Space Station, 
vMle transitory coarpared with those on Earth, will remain in space for 
increasingly lorig durations. Space Station crew members will fly 
missions that endure 90 days. (The Space Station itself my contLiue 
iiseftilly in orbit for 20-30 years.) From the standpoint of individual 
crew menibars, long-duration missions may entail stress, psychologiceil 
depr^f sicn, and diminished performance (Bluth, 1980, 1981; Cunnin^iam, 
1977; Obertf, 1981). 
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Exogenously Mandated Changes L\ SSOC 

Ihe enviconinent faced by the Space station's crew in SSOC will be ji;ist 
as perilous as that in icx:. However, the Space station's social system 
mil not remain constant. NASA lias alreac^ laandated certain rhanges in 
the social system that are to occur between lOC (1993) and SSOC 
(2000) . These changes include: 



Change in Cr&f size 

One difference between IOC and SSOC is the size of the cr^w on board 
the Space StaUon. In IOC, tha crew will be small (S-8 persons) . in 
SSOC, the crew size will be larger, perhaps 20-30 or even more. This 
increase in size will be made possible by the physical e:q>ansion of the 
Station. Most of the added crew meitibers in SSOC will be Payload 
Sipecialists, not Astronaut Pilots. 



Charge in Crew Ooitfjosition 

Several iinportant changes in the conyosition of the crew will occur 
between IOC and SSOC. First, the Japanese and European Space Agencies 
will attach modiiles to the Space station in SSOC and place their own 
Astronaute aboard. Whereas the IOC crew will consist of USA-NASA 
personnel, the SSOC crew will include substantial numbers of several 
distinct nationality subgroi^s: USA, Japan, Europe. 

A second change to occur concerns the skill mix of the crew. In 
IOC, most crew members will be Astronaut Pilots. In SSOC, there will 
obviously still be some Astronaut Pilots on board, but the crew will 
iiicli^ many more Payload Specialists than in IOC. Some calculations 
Illustrate this point, if it takes two Astronaut Pilots to fly the 
Space Station at one time, then a total of four persons will be needed 
to fly the Soace Station around the clock (assuming that fli^t 
operations are never left unattended and that Astronauts work 12 hours 
at a stretch.) The irplication is that, in IOC, at least half the crew 
members will spend their cime flying the Space station, not conducting 
payload operations. The situation in SSOC will be more favorable 
because the number of persons needed to fly the Space station will 
presumably remain about the same (despite the larger physical size of 
the station) ; most of the additional persons on board in SSOC will be 
Payload Specialists, vho can devote their time to scientific or 
manufactxaring productivity. 

^ A third change, less well defined at this point, concerns the gender 
mix of the crew in SSOC. NASA has shown that it int.ends to put women 
in space, al*-hou^ missions to date have been male dominated. 
Presumably the crew of the Space Station will include some women, with 
the move from IOC to SSOC, and the acccmpanyirjg increase in crew size, 
there may be cfpportunity to move the ratio of females/males on board 
closer to l.oo, should NASA opt to do this. 
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Change in Mission Statement and Goals 

In IOC, the primary mission goals will be, first, to fly the Space 
Station and, second, to construct large space structures, i.e., e^^jand 
the jiiysical structure of the Space Station using coitponents flown vip 
via the Shuttle (Danford et al., 1983) . Ihese goals will doubtless 
apply to SSOC as well. 

In SSOC, hc^^er, the increased number of Payload Specialists on 
board will permit other goals to be pursued. These goals may inclxade 
manufacturing and materials processing under conditions of 
micro-gravity, and tending and repairing communications satellites. 
Other objectives i.ay inclxide conducting scier.tific ejqperiments, 
carrying out remote sensing and meteorological monitoring, and engaging 
in fli(^t suqpport (asseiribly, maintenance, checkout, laundi, recovery) 
for manned or uimonned lEO transfer missions (Danford et al. , 1983) 
Overall, the goals pursued by the crew menibers in SSOC will be more 
corrplex and diverse than those in lOC. E)q5ressed more formally, the 
SSOC social system wi?,! be attertpting to optimize vtot may be construed 
as a hi^y catplex raulti-objec'uive function (Keeney and Raiffa, 1976) . 



Change in Onboard Al and Coitpiterization 

Current plans for the Space Station call for an increasing use of 
artificial intelligence (Al) and e}$)ert systems over time. The extent 
to wiiich Al can be used in lOC and SSOC depends both on the 
capabilities of the Space Station's corputers and on the software 
itself. 

In past missions, the coitpiters^ on board NASA's space vehicles have 
not been powerful, due in part to limitations iirposed by physical size 
and wei^t. Ihe situation will be some^t better in lOC. Plans 
indicate that IOC will include scare Al systems, althcu^ these will be 
small-to-moderate in size. NASA will, of course, u^^^e mainframe 
coapoputers on Earth, and these may supplement the Al routines of the 
Space Station's smaller onboard oorrputers. Some Al systems on board 
will probably serve as consulting devices for the diagnosis of hardware 
failures. Other onboard conpiterization may involve scheduling of crew 
activities and maintenance of databases (e.g. , materials inventory) . 

Ey SSOC, the ccatputers on board the Space Station \ Jll be faster and 
capable of running large Al programs. Moreover, the software will have 
evolved with esqperierice on board the Space Station, and will became 
more wide-ranging in its capacities. Ihus, Al and expert systems will 
be more prominent in SSOC than in IOC, and SSOC will be more automated. 

From the standpoint of the social system, the evolution of 
coirputerization is relevant because Al will became integral to onboard 
decision-making. By SSOC, the AT software will be able not only to 
diagnofie hardware failures, but also to schedule h\man activities and 
perhaps even to resolve conflicts among himiaxis regarding priority of 
objectives. 
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Induced Structural Changes in SSOC 

TtiB exogenous changes mandated by NASA for SSOC, as listed abcsve, will 
bring about maty dianges in the internal organization of the SSOC 
social system. Of course, because neither the IOC nor the SSOC social 
systems exist today, one cannot draw firm concli;isions about their 
structural properties or performance under specified conditions. 
Nevertheless, by considering the prcpcsed systems in li^t of research 
findings on Earth-based social systems and earlier space-fli^t social 
systems, some plausible conjectures can made regarding their 
structure and performance, it seems fairly clear that the SSOC social 
system, as contrasted with the IOC system, will be more ooirplex, more 
differentiated into subgroups, and more decentralized with respect to 
decision-making. 



Ccmplexity 

The SSOC social system will be far more ccfrrplex than that in IOC. Ihe 
SSOC social system will include more merab?xs (20-30, rather than 6-8) , 
and the ccatplexity of the system will increase nonlinearly with crew 
size. Hie primary source of this increased coirplexity is not just 
larger crew size per se, but rather the fact that the system's grx^wth 
will occur via differentiation (elaborated subgoals and subgroi;?)s) and 
not via segmentation (Sutherland, 1975; Casti, 1979) . 

This increase in complexity is reflected, for instance, in the 
number of comraunication channels in IOC as contrasted with that in 
SSOC. With 8 crew members in IOC, there are 28 channels (assuming that 
each dhannel is 2-way and that a crew member does not require a channel 
to ccaimunicate with himself) ; with 30 crew members in SSOC, there are 
435 diannels. Thus, a 4-fold increase in crev; size prxxJuces a 16-fold 
increase in cihannels. Of course, it may be the case in SSOC that every 
crew member will not have a need to communicate with all others, but 
the increase in structural ccmplexity is nevertheless clear. 

Increased coitplexity will show up not merely in structura]. measures 
but also in functional ones. For instance, coitplexity might became 
apparent in slower response to eiiiergencies or crises. Today there is 
no way to measure the response-time performance of the SSOC social 
system. Could one do this, however, the SSOC social system mi^t 
emerge as slower (and less predictable; than the IOC system vdien 
responding to such emergencies as fire on board or a collision with 
space debris. To mobilize 20-30 persons scattered in several modules 
(in SSOC) will probably take more time than to mobilize 6-8 in one 
module (in IOC) . 



Differentiation 

The social system in SSOC will be far more differentiated— that is, 
composed of subgroips with distinct identities— tlian the social system 
in IOC. The bases for this differentiation will be national origin and 
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task specialization; tliere may also be sane subgroup) differentiation 
based on gender. 

Under current plans, NASA will add physical modules to the Space 
Station between IOC and SSOC, causing an evoliitionary e55)ansion in 
size. NASA itself will supply some modules, but others will come from 
foreign space agencies (Japan, Europe) . Hence, the crew on board the 
SSOC Space Station will c^insist of persons from all three space 
agencies (USA, Japan, ^Xarope) , possibly in proportion to the financial 
contribution by various participating nations. This means the SSOC 
crew will consist of subgroi5)s that (a) have different rational origin 
(US, Japan, Europe— Britain, Fremce, Germai^, Italy), (b) have 
different native lar^uages, (c) have different skin color and rccial 
characteristics, making grocqp membership readily visible, (d) have 
different moral arrl religious belief systems, and (e) perhaps have 
different goals and lor^-term agendas. Ihis SSOC crew profile differs 
sharply from the fai more hoaiogeneous IOC crew profile; in IOC the crew 
will be single nationality (primarily or entirely USA) , single 
language, consonant beliefs, unitary goals, single command structure on 
the ground (NAS^), etc. 

Crew members from the three space agencies will, at least to some 
degree, constitute distinct subgroc^js on board the SSOC Space Station. 
Of course, the use of a single language (English) on board will help to 
lessen subgroi:?) differentiation. Nevertheless, an extrapolation from 
research on Earth-based social systems suggests that differences in the 
.'jactors noted above (nationality, skin color, native language, belief 
oystems) , reinforced by NASA's plan to house together persons from a 
given country in their own module, will cause the subgroups +"o have at 
least a moderate degree of in-groi^) identification and well-defined 
boundaries (Taj f el and Turner, 1986; Wilder, 1986; Brewer and Cairpbell, 
1976) . 

Another basis for subgroip differentiation present in SSOC (but not 
in jCOC) is tasK specialiZc.tion. As noted above, both IOC and SSOC will 
have AstTOTaut Pilots, but SSOC will have many additional Payload 
Specia^.ists. The SSOC crew, for instance, may include such diverse 
specia.lists as a university astrophysicist, a commercial materials 
engineer, and a national security intelligence analyst. 

The Astronaut Pilots in SSOC may view themselves as a distinct 
subgroup) within the larger social system. They will have similar 
backgrounds, perform similar activities, and work for the same employer 
on the ground (NASA) . Whether the Payload Specialists in SSOC will 
view themselves as a second distinct subgroip is less clear, becaus'=. 
they may differ significantly among themselves. That is, the 
Specialists will come from a range of educational backgrounds, work for 
different employers on Earth, pursue a diversity of objectives whilt on 
board the Space Station, and perhaps even operate under orders to keep 
their activities secret from others on board. If some Payload 
Specialists vrark interdependently on tasks or report tjo similar 
commands on Earth, there is the» possibility that they will form 
identifiably distinct, functioning subgroi:5>s on the SSOC Space 
Station. 
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Decentralizaticsn 

The social system in SSCX: will be more decentralized than that in IOC. 
m other worxJs, decision-iiakii^ will be distributed itore widely across 
persons in SSOC than in ICX:* Siqpervisory control over various 
functions will shift away frm a central coinmand and reside instead 
with a diversity of specialists. 

Pressures tcward decentralization of decision-making and control in 
SSOC will ccjoe fixan several sources. First, as the Space Station 
evolves frcm lOC to SSOC, there will be a change in the Station's 
mission* Payload qperations will beccate itore prevalent and iirportant. 
As a result, the activities on board will become more differentiated 
and specialized (e*g», materials processing vmder microgravity, 
satellite servicing, and conduct of experiments) . Ifost of these new 
activities will be exprartise-based, and they will be controlled by the 
only pecsons on board who know how to do them (i.e., Payload 
Cpecialists, not Astronaut Pilots) • Ihe esqpansion of e}5)ertise on 
board in SSOC will coincide with decentralization of decision-making. 

M&ny Payload Specialists in SSOC will be eirployees not of mSA^ but 
of other organizations on Earth. One iitplication is that the Payload 
Specialists presumably will report to different siqpervisors on the 
gicund. Ihis fact will conduce toward more decentralization of 
decision-making on board the Space Station* 



OEEKATING ETOBtEMS FACING THE SSOC SOCIAL SYSTEM 

As detailed above, the social system on board the Space Station will 
xandergo significant structural changes frcan IOC to SSOC. The systaa 
will e55)erience a change in mission statement, grow in caiplexity, 
differentiate into subgroi^js, and decentralize in decision-making. 
Ihese shifts will produce operating problems for the SSOC social system 
that were not present in IOC. Althou^ one can doubtless identify many 
siach problems, three are of special interest here. Ihese are singled 
out not only because they pose special threats to overall mission 
performance, but also because they potentially can be mitigated (if not 
eliminated) throu^ design and researdi efforts. The three are: 

(a) Hie SSOC system will face prdblai^s with supervisory-control 
functions that were not present in IOC. The burden of coordination 
will be greater, because the SSOC system will include distinct national 
subgroups as well as more task-specialization subgroups than IOC. 
Coordination of activities will be more problematic in SSOC, in part 
becaiase decision-mc»king will be more decentralized* 

To some degree, the problems with svpervisory-control functions can 
be addressed tiirou^ design efforts prior to SSOC. The broad 
research/design issue for NASA is hat type of siqpervisory-control 
structure will best serve the SSOC system, in the sense of providing 
greatest efficiency and hi^est probability of mission success. 

(b) The SSOC system will pose risks of intergroip) conflict that were 
not present in IOC. The presence on board of several distinct 
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subgrcf^ps, with potentially opposing interests and objectives, 
increases the prospect of conflict. 

Bie broad research/design question for NASA is vdiat safeguards to 
build into the system to reduce the probability of overt conflict 
ocaarring. A related question is vftiat can be done to assure that any 
conflicts that do arise are resolved constructively. 

(c) The SSOC system may have more difficulty than the IOC system in 
coping with crises (e.g. , fire on board, collision with space debris, 
etc. ) . Ohe SSOC social system will probably have more resources than 
the IOC system for coping with many crises. At the same time, the SSOC 
system — with its greater degree of differentiation and 
decentralization — ^may be worse-off organizationally than IOC and have 
more difficulty mobilizing to deal with crises. 

Bie broad research/design question for NT^ is how best to structure 
the SSOC social ^^stem so that it can mobilize adequately to deal with 
various crises. 

Bie following sections discuss each of these problems in turn. 
Primary focus is on the nature and genesis of the problems. Attention 
is also given to design issues—that is, to vtot research mi^t be done 
by NASA prior to SSOC to mitigate these problems. 



SUEEKVIS0RY--OQNTRDL AND OPTIMAL PERFORMANCE 

The topic of siqpervisory control by humans on board the Space Station 
has several diuiensions. First, there is the matter of humans' reliance 
on and control over machines. Under current plans, the Space Station's 
physical subsystems will incl^ude many sensors and control devices to 
monitor and regulate automatically a variety of outcomes, including 
life-^w^^port, power sources and management, fli^t control, thermal 
control, and traffic control. Ihus, vftien interfacing with machines, 
the crew members on board will enter the Space Station's control 
process only in a hi^-level monitoring, troubleshooting, and 
decision-making capacity (Kortzman et al., 1983; Von Tiesenhausen, 
1982) . 

A second aspect of supervisory control on the Space Station is the 
regulation of crew members* activities by other crew members. This 
topic is of interest here because there will be a shift in the Space 
Station's onboard sipervisory-control structure during the evolution 
from IOC to SSOC. The following discusses some aspects of this change. 



The Si?)ervisory-Control Structure 

As used here, the term si:pervisory-control structure refers to thar 
functional subsystem on board the Space Station \^ch (a) regulates 
crew activity in the interest of attaining system goals, (b) makes 
choices among collective behavioral alternatives, and (c) handles 
dissent, incli^ding the treatment of noncoirpliance by crew members. 

In social systems on Earth, si:$)ervisory-control structures (often 
called "authority'* systems) typically specify who makes vtiat decisions, 
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v4io evaluates vftiose performance, and vAio influences (gives orders to) 
whoan. No doubt the si5)ervisory-control structure on the space station 
will entail fsach specifications, with the added characteristic that 
sane prerogatives will reside with cr^ laembers on the Space Station 
while others will inure with NASA personnel on the grx>und. 

Si5)er7isQry-control structures can assume a wide variety of fonn£t. 
For instance, at one extreme there is the archetypical militery command 
irodel with hierarchical lines of authority and command. In pyr=3m;.dal 
structures of this t/pe, control flows frcm the tap down, while 
infonration flews '^fesarovic et al., 1970). At another e>ctreme 
there is the equalitarlan model with a flat authority structure. In 
the Space Station context, such a model mif^t consist of equally-ranked 
Astronauts aloft, not taking orders from a crew ineoiiber on board, but 
each r^rti-\>g to somsone on Earth. A third si5)ervisory-control 
structure— falling between the extremes of hiertarchy and equality—is 
the heterarchy. A heterardhical structure is one that resembles a 
network, the nodes of vMch are relatively independent control :,ystems 
and the arcs of which are tlie lines of ccanmunication passing between 
the nodes (Sutherland, 1975) . C3n the Space Station, the nodan in such a 
structire mi^t be iixlLvidual Task Specialists, or possibly teams of 
Specialists. 

It follows that one iirporlxint research/design issue is exactly vA7ich 
si5?ervisory-cx)ntrol structure should be deployed cn board the Spare 
Station. Since this issue is inportant both in IOC and in SSOC, it is 
useful first to look briefly at the IOC situation. 



Si:?)ervisory-Control Structure in IOC 

The main objectives of the Space Station crew during IOC will be to fly 
the Station and to e3q>and its physical structure (add new iiabitation 
modules and platfonns) . Any of several alternative supeivisory-control 
structures mi^t suffice in IOC to acconplish these objectives, 
althou^ some structures are probably better than others. ThP 
question, then, is vMch to deploy. NASA mi^t base its choice on such 
procedures as trial-and-error or extrapolation from previous experience 
with space fli^t si^jervision. Alternatively, systematic research 
could be used to narrow the choice by eliminating some candidat:> 
structui^. 

MDre specifically, NASA mi^t conduct similations on the grxxind to 
test various outcotmes from different si:5)ervisory-control structures. 
Simulations mi^t be done under conditions that closely replicate those 
found in space — e.g., hi^ stress, hi^ noise, restricted 
communication, 90-day duration, tasks sindlar to those done in space, 
and so on. Iitportant outcome measures include productivity levels ; 
crew satisfaction, lack i conflict, adequacy of response to 
emergencies, etc. Multiple replications could be noii on each of 
several alternative si^jervisory-control structures losing standard 
ejqperimental designs. The results should provide a fair idea of how 
the alternative siqpervisory-control structures will perform. 
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Without the remits of such research, it is hard to knew vdiat type 
of structure will eventually be deployed. A plausible cxDnjecture, 
hcwever, is that the Space Station's IOC si^jervisory-control structure 
will, at least to scere degree, reseitible a standard "military command 
model" with hierarchical lines of authority and command. There is a 
general tendency for groc^js facinj perilous environments to organize 
themselves hierarxdiically, primarily because it strengthens their 
capacity to respond to emergencies and crises (Helmreich, 1983 ; 
Harrison and Connors, 1984) . This pattern occurs not only in space 
missions, but in submarines, underseas research vessels. North Sea oil 
rigs, and polar e}qpeditions. Most likely, the IOC system wil]. be no 
exoeption. 

ntius, the slipervisory-control structure on board during IOC will 
presumably involve a designated "Mission Commander" (or some such 
title) with authority to issue orders to subordinates. Of course, the 
6 or 8 Astronauts on board during lOC are goi*- ^ to competent, 
skilled, and resourceful pejrsons. Ihey will have been selected via a 
rigorous screening process, and there will be little reason to doubt 
'their capacity for decisive action. Nevertheless, their roles will be 
fairly restrictive and afford little independence, and they will 
essentially be taking orders frcm Mission Control on Earth and from 
their Mission Commander on board the Space Station. 



Relations Between the Crew and Mission Control 

Both in IOC and in SSOC, one research/design issue deserving 
consideration by NASA is the exact allocation of control between 
Mission Control on Earth and the crew on the Space Station. Tha 
vie^int taken here is that the Space Station will not be "autonomous" 
or independent of Mission Control. Because many monitoring and control 
functions =u:e better performed on the ground tlian in space. Mission 
Control will exert considerable influence over a wide range of crew 
menibers* activities and decisions throu^out lOC. Crew members, 
hcwever, will probably retain control over such things as the inventory 
of iteiBS on board the Space Station and the flow of traffic h\ and 
around the Space Station. 

More problematic is vniether crew members v/il] have control over the 
scheduling of their own day-to-day activities. On one hand. Mission 
^mtrol needs assurance that crew members are performing adequately and 
thus may wish to exercise strong siqpervision over schedules. On the 
other hand, tasks vMch are easy to perform on Eartla may consume great 
time and energy under microgravity in space (Sloan, 1979) . This may 
cause Mission Control to e55)ect too much and could lead to 
oversdieduling of daily activities by personnel on the ground. 

Excessive regulation of crew schedules ty Mission Control can 
produce role overload on ppace missions (Ifelmreich et al., 1979) . Even 
worse, lock-step regulation of the crew's schedule by Mission Control 
mi^t result in such labor problems as the well-p.iblicized one-day 
"strike in space" that occurred during the 1973 Skrylab mission 
(Balbalqr, 1980; Cooper, 1976). To achieve a workable balance, ^t the 
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Space Station needs is an arrangement vdiereby Mission Control can 
specify (longer-range) goals to be achieved, while crew members can 
express and to some degree enforce their preferences regarding local 
vrork flw and task-allocation. 

One approach to such an arrangement is based on e3q)erience in 
earlier space missions. Both the Russians and Americans have reported 
soane success with taslc-assignment procedures viiereby decisions 
regarding ndssion and related tasks are made under the hierarxdiical 
model, and decisions rc;£jarding off-duty activities and living 
arrangements are made democratically (Leonov and Lebedev, 1975; Nelson, 
1973) . Althou^ promising, these results pertain primarily to 
short-duration missions, and their applicability to longer-duration 
missions is still an open question subject to further research. 

Another approach to the issue of day-to-day task scheduling is to 
rely heavily on computer software. This approach will be relevant in 
SSOC, and may also be applicable in IOC. Many large projects of 
various types are managed on Earth today via project planning 
software. Task sciheduling on the IOC Space Station will prxibably not 
be so complex as to require software more elaborate than that available 
today. In fact, conpater software for project management on the Space 
Station will not only be useful in achieving optimal allocation of 
tasks to crew members, but may even emrqe as a tool for conflict 
resolution between the Space station crew and Mission Control. 



Si:5)ervisory-Control Structure in SSOC 

As noted above, the social system in SSOC will be larger, more conplex, 
more differentiated, and more decentralized than that in IOC. In 
consequence, the si^^ervisory-control structure in SSOC will be more 
elaborate than that in IOC and probably will assume a fundamentally 
different form. 



Functions of Siper^/isory-Control in SSOC 

The SSOC si^jervisory-control structure must be geared to handle martir of 
the same functions as the IOC system. These include flying the Space 
Station, coordirating with Mission Control on Earth, and building 
(ejqoanding) the Space station. In addition, it will have to handle 
other functions, su.ch as processing materials and servicing satellites, 
as AeLl as serving as a node in a larger ccarmunication and 
transportation network in space. 

The SSOC social system will include not only Astronaut Pilots, but 
also a large number of Payload Specialists (perhaps as many as 20 of 
them) . Regulation of these Specialists may prove a coropljcated task. 
Most Payload Specialists will be hic^y educated professionals 
laiowledgeable in their respective specialties. Many will be accustomed 
by prior enployment to working under sipervisory-control structures 
permitting a hi^ degree of independence and autonomy. On the Space 
Stction, they may be performing activities (such as research) that are 
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best accx2Kplished under decentralized decision-making, and they will 
probably be working for someone other than NASA (reporting to non-NZ^ 
authority on Earth) . One iirplication of these facts is that a 
strai^tforward extrapolation of the hierarchical IOC military command 
model to SSOC will not suffice. 



Morphology of Si;5)ervisory--Control in SSOC 

It was suggested above that NASA mi^t use experimental research 
(simulations) to design the initial IOC si^jervisory-^xDntrol structure. 
A similar approach would be applicable to the design of the SSOC 
control structure. In the absence of such research, however, it is a 
plausible conjecture that the si^jervisory-control str.xrture in SSOC not 
resemble a military hierarchy to the same extent that the lOC structure 
did (Helmreidh, 1983; Danford et al., 1983; Schoonhoven, 1986), 
Instead, it may more nearly resemble an industrial heterarchy. lh±s is 
a structure in the form of a network, the nodes of which are relatively 
independent control systems. 

IXie to task specialization, decision-making within SSOC will be more 
decentralized than in lOC. Interaction will be more collaborative, 
collegial, and advisory. To a significant degree, influence will flow 
in many directions (not just top-down) and will be based on e^^jertise 
and control of information as well as on organizational status. 
Despite; all this, however, Payload Specialists in SSOC will not be 
truly axitonomous or independent. Tti^ may have more decision-making 
prerogatives than Specialists in IOC, but their discretion will 
nevertheless be circumscribed and their performance will doubtless be 
subject to administrative regulation and review. Much of this 
adttiinistrTition will originate from (non-NASA) personnel on the Earth, 
not from other persons on board the Space Station. 

On the Space Station itself , many Payload Specialists in SSOC may be 
organized into smll teams (2-, 3-, 4-persons, etc.) working on 
specific taJcs. OMs team structure will capitalize on the added 
productivity tl*dt results from such processes as social facilitation 
(Zajonc, 1965; Henschy and Glass, 1968; Ifercus, 1978); at the same 
time, it will permit the Space Station's crew to tackle a diversity of 
lonrelated tasks requiring different conpetencies (research, materials 
processing, satellite servicing, construction, etc.) The teams 
constituting ti>ci nodes of the heterarchy will each have decision-making 
authority regarding work-flow on their own task (doubtless with tJie 
consent of stqpervisors on Earth) . 

In addition to this structure, the SSOC system will likely include a 
small administrative staff— e.g. , a Mission Commander arid ssveoral 
lieutenants vdio will be responsible for coordinating relations among 
the diverse projects on board the Space Station. Ihese^admi^isl:rat^rs 
will have the power to halt or reschedule activities on om project in 
order to facilitate another. (Again, coordination of this type will 
n^quire the concurrence of Mission Control on Earth.) Moreover, these 
administrators will also have the capacity, if an emergency or crisis 
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arises on board, to halt all task activities and to mobilize tJie entire 
canew to cope with the eitergency. 

In sum, it is suggested that the si?y2rvisoiY-control structure in 
SSOC will probably differ from that in IOC, and may assume the form of 
a heterarchy or quasi-heterarchy. This statement, however, can be no 
more than a conjecture. It has been proposed that NASA mi^t use 
simulation research on alternative si^jervisory-control structures as a 
basis for developing the design of the SSOC system. 



Leadership Roles in SSOC 

Hie model of the si^jervisory-control structure sketched here assumes 
that, in SSOC as in IOC, there will be an overall Mission Commander on 
board the Space Station. The exact nature of the Mission Caitimandt-;r's 
role is an open research/design issue. It seems clear, however, that 
his role dur'ing SSOC will be different from that during IOC, for he 
will coordinate and oversee rather than give directives, 
military-style. Althou^ he will have t^e skills to fly the Space 
Station, he will not handle the minute-to-minute task of piloting the 
Station. Nor will he carry out many payload operations per se. 
Instead, his major role will be to coordinate flight: operations and 
payload operations, as well as coordinate relations among i.-ationality 
subgroi^js on board and with Mission Control on Earth. 

Beyond the nature of the Mission Commander's role, there is tlie 
question of vdiat persons mi^t be candidates for that role. Whether 
the position of Mission Commander in SSOC will be restricted to NASA 
Astronauts or open to crew members from Japan and Europe is yet another 
research/design issue for NASA to address. A similar issue, too, 
arises with respect to the lieutenants and other officers on board the 
Space Station. 



THE POTENTIAL FOR OONFLICr IN SSOC 



Risks of Conflict in SSOC 

Conflict in social systems can manifest itself in diverse forms. 
Typical forms incliKie argumentation, social "friction," interpersonal 
disliking, attitudes of distrust, passive refusal to cooperate, and so 
on. Of course, v4ien conflict becomes severe it will emerge in still 
other forms such as physical violence. 

Althou^ the evidence on this poi^it is largely anecdotal, relations 
among crew members in earlier NASA space flights have been harmonious. 
There is little evidence of serious conflict or disagreements among 
crew members themselves. There is, however, sane evidence that 
disagreements have occurred between space crews on one hard and Mission 
Control on the other (Pogue, 1985; Balbaky, 1980; Cooper, 1S76). The 
source of these conflicts appears to have been task overload or 
lock-step regulation or" crew activities iirposed by Mission Control. 
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Except for the longer fli^t duration, there is no reason that 
cxanflict in the IOC social system will be greater than that during 
previous NASA space flints. There itay again be some disagreements 
between the crew and Mission control, but probably not itruch conflict 
ainong crew members themselves. 

In SSCXJ, however, the situation is different. There is inore 
potential for interpersonal and intergrov?) conflict in SSOC than in 
IOC. 



Sources of Conflict in SSOC 

Hie risks of conflict are hi^er in SSOC thaii in IOC because the crew 
will be differentiated into subgroups and, decentralized with respect to 
decision-making. First, SSOC will include many more Payload 
Specialists than IOC. Each such person will have his or her special 
goals, vAiich means that the SSOC Space Station will be pursuing more 
camnlex (multi-objective) goals and that decision-making will be more 
decentralized ti^an in IOC. Tnese diverse goals may be (somewhat) 
inconpatible, and coordination will be more problematic. 

Ji;ist as significantly, the inclx;ision in SSOC of several nationality 
groups with ciistinct identities (USA, Japan, Europe) creates the 
potential for intergrouqp conflict. Whether conflict actually en:pts 
among members of diffei^t subgroc^js depends on incoirpatibilities among 
the different roles, values, and goals of these persons. The fact that 
these subgroi^ will be housed in distinct physical irodules will 
probably hei^ten ccJiesiveness within the subgroi$)s and thereby 
increase the likelihood of friction between subgroups. The added fact 
that Americans nay be in the minority (or, at least, not in the 
majority) on board the Space Station in SSOC could make the situation 
even more volatile. 

Althou^ it may be only partially relevant to SSC2, research on 
Earth-based systenis shows that integration is problematic in social 
systems havii>g marry subgroiojs* Systems of this type are more 
vulnerable to hi^er levels of conflict, mis-coordination, lack of 
cooperation, and mistrust than are systems having no subgroups. Not 
surprisingly, conflict between subgnxps is especially likely to occur 
vjhen they have divergent objectives or interests (Campbell, 1965; 
Sherif et al., 1961; Diab, 1970). Moreover, when conflict doe^ occur 
in social systems of chis type, it often is more severe (i.e., more 
rancorous, more divisive, more difficult to resolve) than that 
occurring in systems havi>^ .iO distinct subgroups. This happeiis 
because, in systems with distinct subgroc^^s, conflict is not just 
disagreement among persons as individuals, but among persons as agents 
of subgroi:5>s. 

In sum, NASA has chosen to deploy a heterogenems, differentiated 
SSOC social system in vMch ti.^ risks of conflict are hi^er than would 
be the case in certain other tyj:)es of social systems. The risks would 
be less severe, for instance, had NASA chosen to deploy an SSOC system 
more like that in IOC — i.e., a system viiere crew members have a uniform 
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nationality (USA) , single native language, unitai / goals^ centralized 
ccratand structure on the ground (NASA) , single living module, and so 
on. 



Uie Inportance of Avoidirg Conflict 

No assertion is irade here that conflict, mistrust, and lack of 
coordination are inevitable in the SSOC social system. It is merely 
being siggested that conflict is more likely in SSOC than in ICX:. 
Conflict occurring S?OC will probably be of low-to-moderate 
intensity (not severe intensity) , and will probably appear in such 
forms as argumentation, friction, and distrust (not physical 
violence) . Ihere will be no need to install a jail on the SSOC Space 
Station. 

It is assumed here tha\: NASA will wish to avoid conflict in SSC Co 
Hie primary reason for this is cost. The dollar e55)ense per crew 
man-hour aloft is very hi^ (est. $40,000 per man-hour) , and it is 
obviously undesirable to waste time throu^ lack of coordination or, 
\iors9., throu^ the need to resolve qpen conflict. 

A second reason for avoiding conflict in SSOC is that conflict in 
social systems often feeds on itself. Ihat is, an initial conflicted 
encounter may lead t:o hard feelings, disliking, and attitoades of 
distrust toward uit-groip members, as well as the development of 
cognitive biases and stereotypes (Wilder, 1981; Brewer, 1986; Wilder 
and Cooper, 1981) . This makes subseqcient coqperrtion harder to 
achieve, and may even intensl^ the problem (i.e. , "escalation of 
conflict") . Intzerpersonal conflict changes the c^ttitudes and beliefs 
of people involved; and tlds change is often tor the worse vAien viewed 
from the stanc%)oint of system performance (Cocpe>* aixi Fazio, 1986; 
Mchener et al., 1986; Pruitt and Rubin, 1986). 

In the following sections, then, consideration is given to various 
ir..^ans by ^ch NASA, through its design efforts, can reduce the risk of 
conflict among the crew in SSOC. These n^eans include the alignment of 
goal structures, patterning of social interaction, aM selection and 
txaining of crew members. The fundamental research/design issue 
underlying this discussion is how to design the SSOC social system to 
avoid or minimize interpersonal conflict; a related issue is how to 
equip the crew with t:echniques to resolve conflict (if it occurs) in a 
manner that is constructive from the stan^int of the larger system. 



Conflict Avoidance via Goal Structure 

Various approaches are available to NASA for avo:l Inq and/or reducing 
conflict in the SSOC social system. One of the more effective is to 
give close attention to the design of, and alignment among, subgroup 
goals. 
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Ihe Iirportance of Goal Alignment 

As noted above, opposition of interests amorig subgroi:55S in 
differentiated social systems is an iitportant factor producing 
conflict. With opposition of interests, overt conflict frequently 
occurs; without it, there is no reason for conflict to crxaor (Campbell, 
1965; Sherif et al., 1961) 

In IOC, there will not be much opposition of interests among crew 
^^enibers* Ihe Space Statiai will liave a single coherent goal (i.e., an 
objective function that specifies vfliat should be maximized by system 
performance) . Ihe main mission will be to fly the Space Station and to 
carry out evolutionary e?5)ansion of the Statiai via construction. Crew 
members will not be working at cross-purposes. In contrast, during 
SSOC the Space Station will have a more ccatplex objective function. It 
may even have more than one objective function because, in addition *co 
the function for the entire system, there may ^xjst separate 
sub-functions for each of the subgixfcps on board. Conflict mi^t 
arise, for instance, over maipower scheduling or over allocation of 
scarce resources such as electrical power. In SSOC there will be at 
least some risk that one or several subgroi5>s on bc^rd may have (or 
develop) goals that do not mesh smoothly with those of other subgroups. 

An iirportant rosearch/d^j.gn issue for NASA is to specify objective 
functiai(s) for the SSOC crew such that the attainment of goals by one 
subgroi?) does not prevent the attainment of goals by some other 
subgroi:$)(s) . Well-conceived objective functions will promote harmony 
and productivity; conversely, ill-conceived or misaligned goals will 
doubtless generate interpersonal and intergroiqp conflict. 



The Sv^jerordinate Goals Approach 

One approach to aligning goals among SSOC subgroi:ps is to establish 
objective functions that emboc^ wliat are called "sijqperordinate goals" 
(Sherif et al., 1961; Bla^.^ and !lbutan, 1968, 1976, 1984). A 
si:5)erordina'l:e goal is one that (a) is held to be important by each of 
the subgroi^js conprising the largei* social system and (b) can be 
attained oiHy throu^ cooperative interaction among subgrou?)s (i.e. ^ 
cannot be a\±ained by a single subgroup acting alone) . Si:perordinate 
goals induce ah h coincidence of interest among diverse subgroups. 

Research on Earth-based social systems has shown repeatedly that 
siperordinate goals inhibit conflict emong subgroups. Moreover, in 
social systems v*iere the subgroi:5>3 are already engaging in open 
conflict, the introduction of new si:perordinate goals can mitigate or 
resolve conflict (Sherif et al., 1961). Si5)erordinate goals reliably 
improve cooperation arxi reduce conflict among ^ubgroi^ in a larger 
system. 

Eiere may be several ways to incorporate siperordinate goals in the 
design of the S:3C"' social system. One particularly interesting 
possibility is to include such goals in the computer software used on 
board the Space Station. This becomes especially viable if hiASA uses 
some kind of "project scheduler" software to assign tasks to crew 
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members. Software of this type entails optimization in some form or 
aiKrtlier; vftien ^^isignijig this softwaire, NASA will have to decide exactly 
vdiat is to be optimized. It is suggested here that vAiat should be 
c^imized in SSCX: is iK>t merely "productivity, " but also system 
integration. Both concerns are iirportant. The design and use of 
project scheduler softe^are provides an opportunity to expressly 
incorpr-mte goals that bind the subgro;5)s together. 



Ihe Game-Oheorttic i^roadi 

An alternative approach to goal design is to treat the relations among 
subgroups in SSOC as a set of n-person games (Shiotlx, 1982, Owen, 1982, 
Vorcb'ev, 1977; Leitraan, ,1976). Ihat is, the subgroijps in SSOC mi^t be 
viewed as players having (somevdiat) opposing interests in n-person 
noi^-cQnstant-sum games*, These games could be analyzed to identify 
points of contention between subgroi:5>s and likely outcomes of conflict. 

Sipecifically, one mi^t first identify a set of scenarios 
(sitxations) that could arise on board the f^ce Station, and then 
treat each of these as a distinct n-person game. These scenarios mi^t 
incl\:de such events as EVAs, health emergencies, payload 
ea^rimentation, space debris eitergencies, etc. Each could be analyzed 
in terms of the likely eqirD ibrim outcome under sane solution vX)ncept 
(e.g., the Nash non-cooperative equilibrium) . Results of such an 
analysis would shew the extent to vMch the subgroups have opposing 
interests and indicate vdiether they would play a strategy leading to an 
outcome that is not desirable collectively (i.e., not Pareto optimal) . 

Ihe point of conducting such an analysis is not only to anticipate 
issues over vMch conflict might en:qpt, but eventually to design the 
subgroi5>s' objective functions to ass'ire that the payoff matrices for 
most n-person games played on board lead to a benign equilibrim. 

Persons within NASA are familiar with the game theoretic approach; 
NASA used gaire theory to resolve conflict aiiKDng groi^js of engineers 
with ccjpeting demands regarding equipment to be placed on the Mariner 
spacecraft. Ihere may be opportunity again to use it advantageously in 

ssoo. 



Conflict Avoidance via Patterned Social Interaction 

Another broad approach to avoidance of conf32.ct in SSOC entails 
intentional structuring or channeling of social interaction atvong ^rew 
menibers. In particular, NASA mi^t (a) design the si;5)ervisory-control 
structure so that it detects and resolves conflict readily, (b) 
structure the interpersonal contact on board the Space Station to 
minimize the probability of conflict occurring, and (c) structure 
communication on board so that message-type maps into media-types in a 
way that lessens the probability of conflict. Each of rhese is 
discussed below. 
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Conflict and the Si^jervisoryHiXjntrol Structiare 

Usually it is better to prevent cx)nflict before it arises than to 
atteitpt to resolve it after it has escalated. For this reason, v4ien 
designing the onboard siqpervisory-control structure for SSOC, NASA may 
XTish to include \diat are termed "boundary-spanning roles" (Adams, 1976: 
Wal^, 1974; Katz and Kahn, 1966; Holn^ et al., 1986) . These are roles 
the occupants of vdiidi perform functions that link subgroi^^s together. 
For instance, persons in boundary-spanning roles may communicate across 
groups on sensitive, issues, or serve as representatives in 
decision-making that affects the relations betweer Jiubgroi:ps. Because 
the SSOC social system will contain several Gubgrni^, the inclusion of 
bcwndary-spanning roles in the larger system may help to avoid conflict 
between groips and to resolve conflict should it occur. 

In systems without boundary-spannirg roles, one typical consequence 
of conflict is a reduction or cessation of corninunication between the 
parties. Any such reduction of communication would cibviously be 
landesirable in SITOC. The use of boundary-spanning roles in SSOC may be 
a way of establishing — and of keeping open — channels between the 
nationality groi5>s on board. In addition, occi^jants of 
boundary-spannirg roles can also serve as negotiators with respect to 
points of contention between subgroups. 

In sum, the use of boundary-spanning roles in SSOC may provide a 
mechanism for avoiding conflict. TSie researdVdesign issues for NASA 
are exactly what boundary-spanning roles, if ary, to include in SSOC, 
and how to iiiterface these roles with the activities of the Space ^ 
Station's Mission Commander and other administrators. One possibility 
in this regard is to design the role system such that persons who will 
serve as lieutenants to the Mission Commander will also fun^'^j'^n as 
boundary-spanners. 



Conflict and Interpersonal Contact 

A relate researdh^'design issue is how best to structure interpersonal 
contact among regular crew members to promote cohesive, non-polarizing 
relations among subgroiqps in SSOC. 

Research on Earth-based systems suggests that NASA might reduce the 
probability of conflict between groiqps by assigning tasks to crew 
members with an eye not just to getting work done, but also to 
promoting cooperative contact and interdependence among persons from 
different subgroi:5)s (Amir, 1969; Worciiel et al., 1977, 1978; Deutsch, 
1973; Wordhel, 1986) . For instance, NASA mi^t assign tasks such that 
persons from different nationality groi^js work on an interdependent 
basis. Under such an arrangement, both Americans and Euixjpeans would 
do EVA^ both Japanese and ISurqpeans would do payload operations 
(ejqperiments) , and so on. The situation to avoid is one v^iere the 
Japanese do all the EVA, the Europeans do all the payload operations, 
the Americans do all the flying, etc. The key is to create 
task-interdependence and cross-linkages airong nationaJlty groi:^. 
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Another potential overlap is that between Astronaut Pilots and 
Payload Specialists. If there are only four or six Astronaut Pilots on 
board in SSOC, there may not be much qpportunily for task overlap 
between these grou^js. If there are many Astronauts on board, however, 
tasks can be assi( ned to promote collaboration. Some Astronaut Pilots 
mi^t be assigned to conduct payload e^qjeciinents on an interdependent 
basis vath Payload Specialists. Again, the objective is to create ties 
across subgroi;5)s. 

Beyond task interaction, NASA may also find it possible to structure 
non-task activities among crew members in such a way as to develop ties 
across subgroi^ boundaries. Of course, most waking hours each day will 
be spent on tasks (12 hours/day) ; crew members will have little thae 
for non-tadc acti\lcies. Yet, non-task interaction may prx3ve iitportant 
in creating and maintaining positive attitudes and trust across 
subgroups, in part because the size of the SSOC crew will preclude all 
members rrom interacting with one another in a task r.ode. 

Some research on Earth-based systeros shows that informal contact 
across subgroi^ is most effective in strengthening interoroun bonds 
vdien it is conducted on an equal-status basis (Amir, 1969 J 1976; 
Norvell and Wordiel, 19C1) . Exactly how to do this in SSOC is en open 
issue. For instance, it itay be desirable to assign spatial living 
quarters to create cross-linkages axrong nationality gTOi;^^. ihat is, 
assign some USA astronauts to sleep in the Japanese module and the 
European module, assign Japanese and European astronauts to one 
another's modules and to USA module, etc. Alternatively, it may prwe 
desirable to have crew members of different subgroi^s eat together 
(this will not carry special meanii^g for Americans, but it may for the 
Europeans) . How to structure informal contact in SSOC to strengthen 
intergroi^ bonds is an open research/design issue for NASA. 



Conflict and Ca<^. f jnication 

Hie comraunication system on board the Space Station in SSOC will differ 
from that in IOC. Ihe size of the SSOC communication netarark will be 
larger (i.e., contain more nodes) than that in IOC because the crew 
will be larger in size. Moreover, the total communication flow (number 
of messages sent) will be hi^ier in SSOC, althou^ the messages per 
crew member may remain about the same. Communication flows in SSOC 
will reflect the clustering of crew members into subgroi^js; flows will 
be hi^er within and lower between subgroups. 

From the stanc%»int of conflict and conflict resolution, however, 
the most critical difference between loc and SSOC will be the media of 
communication used. During IOC, v^en the Space Station will have a 
small crew housed in a single module, a significant proportion of 
communication will doubtless be face-to-face, in SSOC, with a larger 
crew dispersed in several modules, a smaller proportion of 
communication will be face-to-face and a larger proportion win occur 
via other media such as telephone and electronic (computer) mail. This 
will result naturally because SSOC crew members will have to 
communicate with others in remote locations in the Space 3i:ation. 
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Ihe shift in crmi inication media between IOC and SSOC may be 
in?:ortant because the varioios media have different proptirties. 
Telephones and cotputers, for exairple, do not convey some types of 
information as fully as the face-to-face channel (Mehrabian, 1972) . 
Eace-to-face cornraunication transmits linguistic, paralinguistic, 
kinesic and proxemic cues, \Mle electronic (coroputer) mail transmits 
linguistic cues only (Connors et al., 1984; Danford et al., 1983; Hill, 
1968) . One inportant consequence is that non-face-to-face media carry 
less information about personal relations and feelings. Ihvis, in view 
of tha SSOC system's potential for fractionating conflict, heavy vse of 
non-face-to-face media in SSOC may produce undesirable consequenceis. 

Ooitputer-mediated carratiunication is especially problematic in this 
regard, ihe effects of coitpiter-mediated coorammication are not yet 
fully understood, but it is increasingly clear that this medium is good 
for some purposes, poor for others. Conpiter conferencing tends, for 
instance, to increase equality of participation more than face-to-face 
conferencing (Jdiansen et al., 1979) , \Mch may iirprave tiie potential 
for circumspect consideration of issues. Electronic mail is not, 
however, a good medium by vMch to conduct bargaining or to rei^olve 
interpersonal conflict, because it can foster one-sided proclamations 
and policy statements couched in concepxzs not shared by participants. 
More generBlly, coitputer-mediated communication may be less effective 
than faca-to-face coommunj cation £ur reaching consensus on issues viiere 
the "correct" answer is not obvious. In addition, research shows that 
\:ise of ccappputer^mediated comiiiunication sometimes leads to polarization 
and flaming (Kiesler, et al., 1984) . Behavior of this type would be 
especially undesirable in SSOC, given the subgroip differentiation 
projected for the social system. 

The burden placed on ccortputer-mediated ccmmunications will increase 
in SSOC in the sense that failures to communicate adequately may have 
more serious consequences in SSOC than ixi IOC. Communication failxores 
will assume higher criticality in SSOC due to the differentiated nature 
of the social system. To communicate across cultures is difficult 
enou^ via fac^to-face interaction; to rely heavily on media that 
filter informa\:ion in uipredictable ways will make the communication 
prctolem even worse. 

Thios, a general research/design issue for NASA is hew may the SSOC 
crew best use the communication media on board the Space station to 
prcmote non-polarizing interpersonal contact and to create 
cross-linkages between members of subgroups. 

At the least, NASA may wish to develop an "etiquette" regarding use 
of the various media on board. Tl^is may include not only rules for the 
Vise of m edia, but also rules repyrding what types of messages are to be 
sent over wiJich media. Some theorists have hypothesized a 
(statistical) interacticai effect between media and message type on 
communication effectiveness (Geller, 1980; Danford et al., 1983). In 
view of this, one approach to the SSOC communication prctolem is to seek 
a match between media and the type of message being sent (i.e. , where 
"type" refers to message content coded from the stan:%x)int of its 
functionality for the social system) . Tliat is, to achieve hi^ 
communication effectiveness, serjd some types of messages by one 
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Channel, other typee by other channels. To achieve such regulation, 
the Space Station will need norms specifying what types of messages are 
sent via ccatpater mail, vtot Ir^'pes via telephone, and \^t types via 
face-to-face contact. Hhe exact nature of these norms is an open 
issue. 



Conflict Avoidance via Selection and Training 

NASA has traditionally placed great eirphasis on selection and training 
of its crews. Selection and training will continue to play an 
irtportant part in IOC and SSOC Space station operations. The potential 
for conflict in SSOC, howe'/er, iitplies that vdien NASA moves fran IOC 
toward SSOC, it may wish to make some adjustments both in the criteria 
used to select crew members and in the content of Astronaut training. 
An inportant research/design question is vfliat should be the nature of 
these changes. 



Crew Coirposition and Selection 

Certain obvious shifts will occur in NASA crew selection activities 
from IOC to SSOC. First, the number of persons selected will increase, 
because NASA will be flying larger crews. Second, the skill-mix of 
persons selected will shift; compaidd with IOC, a larger proportion of 
crew members will be Payload Specialists, a smaller proportion 
Astronaut Pilots. Third, the nationality of persons on the Space 
Station will change, to include Japanese and Europeans. 

less self-evident is that, v*ien moving from IOC to SSOC, NASA may 
find it necessary to change its crew selection criteria. To enhance 
integration of the SSOC social system, NASA nay opt for crew members 
v*io, by virtue of t \eir background, can serve as linking-pins aoxss 
subgroi^. For exaitple, in SSOC there may be a premium on crew members 
v*io have a background of cross-cultural or international ejq^erience, or 
v*io are multi-lingual (e.g. , NASA Astronauts v*io speak French, or v*io 
have lived in Japan) . Alternatively, NASA may choose to "manufacture" 
persons with such backgrounds by, for exaitple, having its pilots live 
in Europe or Japan for several years. 

Another possible change concerns the personalitY profile of the idea 
Astronaut. In IOC, with small crew size, there will be a premium on 
persons v*io are hi^ on interpersonal compatibility and v*io relate well 
to others. Tbfi concept of interpersonal compatibility, however, is 
more applicable to small groins of 6-8 than to larger grouqps of 20-30. 
??arely does one find a groi?> of 30 persons, all of v*iom are 
interpersonally compatible. Ti. s, in SSOC, the enphasis on 
compatibility may fade and give way to other interpersonal skills, such 
as diplomacy. More generally, a research/design issue for NASA is to 
discover vMch personal attributes of crew members best serve to 
enhance linkages between subgroi^js in SSOC. 
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Conflict and Crew Training 

Astronauts from different countries and reared in different cultures 
will hold different expectations regarding patterns of social 
interaction. Althou^ these may not affect the technical aspects of 
spaoe fli^t, scawe will seriously effect interpersonal sentiments. For 
instance, respectful interpersoral treatitvant among the Japanese looks 
different froa that among the Americans or the French. Without 
adequate preparation, misunderstandings will arise among crew msnibers. 
NZ^ may wish to address tiie iirplications of this \Aien training 
Astronauts for SSOC. 

Ertphasis throu^iout this section had been on avoidance of conflict. 
Even with the best preparation, hcwever, some conflict will occur in 
SSOC. For this reason, NASA may wish to train crew meitibers in conflict 
resolution techniques. When persons are 'onder stress, some forms of 
conununication and negotiation are more effective than others (Rniitt, 
1981; Rubin and Brown, 1975) . Useful conflict management skills in 
American society include: reflective listening/ assertion skills, 
issue control, structured exchange reg3ccding eiootioncil aspects of a 
controversy, and collaborative prdbleon solvi/)g (Bolton, 1979; Walton, 
1969) . Whether these techniques will work in a cross-<:ultural context 
like the SSOC social system is an open issue. If they do work, NASA 
may wish to include them in its training regimen. Iheir use could 
increase crew's effectiveness in dealing with interpersonal 
disagreements \^en th^ arise on board the Space Station. In sum, an 
important research/design issue is exactly \Aiat conflict resolution 
skills should be tau^t to crew members. 

COPING WITH ENVIIOMENTAILY-INroCED CRISES 

Crisis: A Definition 

As used here, the term "crisis" refers to a circumstance in vMch 
scsnething threatens to destroy or impair the social system on board the 
Space Station, and which therefore requires an immediate response from 
crw members (as well as from Mission Control) to assure the continued 
functioning of the Si'stan. Crises can be precipitated by many 
different events. For instance, crises mi^t result if: (a) a sudden 
leak or air-loss occurs, causing the cabin pressure to decline sharply, 
(b) a sudden loss of power occurs, (c) a crew 'TtM:)er becomes seriously 
ill, (d) seme space debris collides with the Space Station, producing 
serious damage, (e) one of the bio-e55)eriments in board goes awry, 
releasing pathogens or contaminants that pose u threat to humans, or 
(f) fire ex-i^jts on board the Space Station. Ihis list is illustrative, 
not exhausti^'^^-. 

Most of the events listed here are inprobable, in xiie sense that 
th^ will occur only infrequently. Hcwever, the Space Station will 
operate in a perilous environment for a planned 25-30 years and, while 
the probability of a crisis on any given day may be lew, the odds of 
avoiding crises are much less favorable over the full span of 25-30 
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years. Althoui^ not inevitable, one or several excises are probable 
during the operational lifetime of the Space Station. 



Normal Operating Mxia vs. Crisis C^)erating Mode 

The stnicture of many systems in nature is controlled by the manner in 
\Mch the system mi^t fail (von Neumann, 1966; Weinberg, 1975) . In 
other words, natural systems often incorporate scsne precautionary 
measures to prevent failure, or at least to prevent a failiare from 
being lethal. Social systems also display this characteristic, and 
they often oof j with crisis and failxire by havinj several distinct 
operating modes, such as "normal operating mode" vs. "crisis operating 
mode." In normal operating mode, v^ien the envirorsnent is not 
disruptive, the social system conducts "business as iisual." Human 
plans drive the action, and the eitphasis is on productivity and 
performance. However, .iii crisis operatirg mode, v^en the social system 
responcas to environmsntal threats, theie is a shift in the social 
system's objective fuiKtion. Bie pre<xcaninant goal in crisis mode 
becomes that of assurir^ the very survival of the system, and 
activities are reorganized in terms of this goal. Environmental 
contingencies, not human plans, drive the action; persons in the system 
became more reactive and less proactive. 

Most likely, the IOC and SSOC social systems will use several 
operating modes. Ihey may even inplemeait several distinct crisis 
operating modes, contingent ipon vtotever types of crises occur. 
Nevertheless, crisis management in SSOC probably will differ from that 
in IOC, in part because the shift from normal mode to crisis >node will 
be nvore difficult to acconplish in SSOC than in IOC. 



Crisis Management 

Crisis Management in IOC 

Crisis-managemejit is never easy, but the characteristics of the IOC 
social system will equip it well to respond to crises v^en ti^ey arise. 
Ihe small size and great homogeneity of the crew, the housing of the 
crew in a single habitat module, ana the nature, of the 
si?)ervisory-<x:)ntrol structure will enable the IOC system to switch 
quicikiy to crisis operating mode from normal qperatirg mode. In ICC, 
crisis operating mode will (a) establish centralized control of crew 
activities, (b) assure adequate information flow among members, (c) 
create the potential for clear, consensual decision-making, (d) rapidly 
establish coordination anvong crew members, and (e) apply the greatest 
e^q^ertise avaiJ' .3 to the problem. In social systems, these are 
desirable feal _es tinder emergency conditions. 

The IOC's si5)ervisory--control structure, assumed to be patterned 
after a hierarchical "military command model," will function fairly 
well during a crisis. Becai:ise command is centralized, tl j system will 
hold together and coordination of action wi^x be attainable even under 
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stress. The hierarchical struc±ure will enable the IOC system to focus 
resources, restrict non-adaptive responses (such as arguinentation or 
countermanding) , and achieve an adequate level ■^'f communication among 
crew members. In general, it can provide the hi<^_ level of 
interpersonal organization needed to respond to crises. 



Crisis Management in SSOC 

Hie SSOC social system will have more resources than the IOC system to 
deal with crises. Far exaitqple, its hardware may have better sensors to 
anticipate crisis-precipitating events before they happen, its 
ejqjert-system software may provide more accurate diagnoses of problems, 
ani its crew may include a greater mix of skills useful during crises. 
Nevertheless, crisis-management in SSOC will present its own problems. 
The incidence of crises may be hi^ier in SSOC than in IOC, because 
there will be more things to go wrong. There will be more crew members 
to get sick, more area to get- hit by space debris, more bio-e>^)eriments 
to blow v[£), more on-board hardware to malfunction, etc. Moreover, the 
organizatioral form of the SSOC social ^stem will make it more 
difficult to respond adequately to crises. The SSOC system may have 
more difficulty switching frcan normal operating mode to crisis 
operating mode than the IOC system. 

The SSOC social system will be larger, more cortplex, and more 
differentiated than IOC. Moreover, as noted above, si^iervisory-control 
and decision-making in SSOC will be decentralized in normal operating 
mode. The presence of different nationality groi:?)s and of many Payload 
Specialists performing diverse tasks will create a heterarchical 
si?3ervisory-control structure. If a crisis arises, the 
sv^jervisory-control structure in SSOC must coordinate the response of 
distinct subgra^s living in different physical modules and pursuing 
divergent goals. This task is not iirpossible, but it will be more 
difficult than in IOC. . . 

m all likelihood, a shift frcsu normal operating mode to crisis 
operating mode in SSOC will entail a quick move frcra a decentralized 
heterarchical structure to a centralized hierarchical one. Failure to 
move back to a hierarchy during a crisis in SSOC will leave the system 
vulnerable. If the Space Station relied on a decentralized system 
during crisis, it would risk lack of coordination among crew members, 
less-than-qptimal deployment of resources to deal with the problem, and 
perhaps e/en disagreement over th^ best type of response to the 
emergency. . . 

Althou^ a shift from heterarchy to hierarchy during crisis seems 
likely, the exact form of SSOC command during crises is an cpen 
research/design issue. Danford et al. (1983) have suggested that it 
would be appropriate to have control during crisis rest in the hands of 
a specialized safety officer or "crisis leader." This scheme has some 
merit, but it may also create excessive corplexity because that it 
requires yet another form of control beyond the heterarchy-plus-Mission 
Commander structure discussed above. A si:?)erior alternative mi^t be 
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sinply to recentralize control during a crisis aroiird the regular 
leader (l^ission Conmander) . 

Recentralization around the Mission Commander will work best if NASA 
trains crew members in specific skills for dealing with different types 
of crises. Biat is, some crew members will be specialists in coping 
with one type of crisis and other crew members with another type of 
crisis. Bius, when a crisis occurs, two things will happen. First, 
crew members will coordinate around the Mission Commander; and second, 
the Missiai Canmonder, assisted by those persons v4io are specialists in 
the particular type of crisis at hand, will direct the efforts of the 
entire crew to ccpe with the emergejxy. Eiis approach brings both 
special ejqjertise and strengthened coiratand to bear in a crisis. 

A related research/design issue concerns the use of Al and 
computerization to aid decision-making during crises. Expert systems 
that diagnose the causes of hardware failxires will be operational 
increasingly as the Space Station noves from IOC to SSOC, and these may 
increase the speed and accuracy of the crew's efforts during crises. 
To scffloe degree, expert systems will be able to si^jplement (even 
si^lant) the knowledge and ejqjertise of crew members. On the other 
hand,^use of AI systems in the analysis and diagnosis of 
life-thi-catening svents raises the issue of trust— to vihat extent will 
crew members trust software-based diagnoses. Ihe lase of AI may affect 
not only how the crew is organized to ccpe with crises, but also \^+- 
mx of skills IS (and is not) placed on board and how cr&<r members ai 
trained. These are natters that can be addressed throu^ research and 
design efforts. 

One final research/design issue concerns the iitpact of 
caipifcer-mediated communication during crises. As noted above 
conpiter-mediated comraunication will be even more iitportant and 
prevalent in_ SSOC than in IOC. Whether computer-mediated communication 
enhances or inhibits satisfactory responses to crises is an open 
gjestion. It was noter' above that computer-mediated communication may 
be less effective than xace-to-face comraunication for reaching 
consensus on issues \^ere the "correct" answer is not c±(vious. Some 
CTises on board the Space Station may have clear-cut diagnoses, but for 
those that do not, conpiter-mediated comraunication may prove more a 
liability than an asset in achieving adequate response from the crew. 
The (in)effectiv.'2ness of computer-mediated communication during closes 
IS an inportant research topic. 



Sm^JMARY OF RESEARCH AND DESIGN ISSUES 

This paper has discussed issues that arise in the design of the SSOC 
social sj^tem. Attention has been given to three bmad problem areas: 
(a) the cOiaracteristics of the SSOC sipervisory-control structure, (b) 
tne potential for conflict within the cr^, an^' (c) the capacity of the 
SSOC system to respond to crises if they arise. Specific research 
suggestions are summarized below. 
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Issues Regarding SSOC Supervisory-Control 

One inportant research/design issue for NASA is? v^t type of 
si:5)ervisory-ccntrol sliuc:±ure will best serve the SSOC social system, 
in the sense of providing the greatest efficiency and hi^est 
probability of mission success. Ihere are a wide variety of 
si:5)ervisory-control structures that mi^t be deployed on board the 
Space StatdLon— hierarchical, equalitarian, heteraixhical, etc. — and the 
exact nature of the system to be vised is an open issue. 

It has beei", proposed here that the Space Station's 
si5)ervisory-control structure will take the fona of a hierarchy in IOC, 
and that it may subsequently shift in the direction of a heterarchy in 
SSOC. Biis is really no more than a conjecture, hcwever. NASA can 
make decisions regarding the form of si?)ervisory-control structure to 
be used in IOC and SSOC on the basis of trial-'and-error or past 
experier)ce with space fli^t supervision. Alternatively, it mi^t mate 
them on the basis of researdi firKiings, such as those obtainable from 
simulations conducted on the ground. 

Specifically, it was si^ested above that NASA mi^t conduct 
simulations to t:est various outcomes from different supervisory-control 
structures. Ihese simulations would be done under conditions that 
closely replicate those found in space—e.g. , hi^ stress- hi^ noise, 
restricted coraraunication, 90-day duration, tasks similar to those done 
in space, and so an. Major outcome measures include productivity 
levels, cr^ satiisf action, lade of conflict, adequacy of response to 
ercergencies, etc. Multiple replications could be run on each of 
several alternative si:?)ervisory-control structures using ejperlmentral 
designs. The results should provide a tiseful indication of hew the 
alt:ematdLve sipervisory-control structures will perform in space. 

One design sub-prctolem is to determine the approfpriat:e division of 
control between Space Station crew and Mission Control on Earth. One 
concrete manifestation of this problem is the issue of vdio should have 
control over the crew's day-to-day task assignments. Various 
suggestions, including the vise of AI project planning software to 
acccaonplis.^ task assignments, were discussed. 

A seco^ ' design sub-problem is to deteimne the apprqpriat:e division 
of contro-L dthin the Space Station's crew. Presumably the Task 
Specialists ^?SOC will be afforded scire degree of independence with 
regard to their ^icular activities, but the exact rarige is unclear. 
The Mission Cornmana. role during SSOC will likely shift toward 
coordination of other dvities, but the exact definit:ion of the 
role's prerogatives and powers is prdblemat:ic. 

A related issue is the selection criteria regarding crew officers; 
this matter is made itore coirplex by the inclusion of crew members from 
other space agencies (Japan, Europe) . Whether the role of Mission 
Commander will be restricted to NASA Astronauts or open to crew mertibers 
from other countries is a research/design issue that NASA mi^t 
address. 
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Issues Regarding Crew Conflict in SSOC 

Hie risks of interpersonal and intergroiqp conflict will be greater in 
SSOC than in IOC. Hiis is true in part because the SSOC system will 
include many subgrot^js with distinct identities (Task 
Specialists/Astronauts; and USVJapan/Eurcpe) . The broad 
researdVdesign question for NASA is vAiat safeguards to build into the 
SSOC system to reduce the probability of overt conflict occurrincr. and 
to resolve conflict if it occurs. 

A wide variety of steps can be taken in the design of the SSOC 
system to reduce the prcdsability of conflict. Some discussed in this 
paper include: 

(a) Specif objective function(s) for the SSOC crew such that the 
attainment of goals by one subgroi?) does not prevent the attainment of 
goals by other subgrocpCs) . Approaches to this include the use of 
si^jerordinate goals and game-theoretic analysis of subgra?) 
interaction. One inpleraentation mi^t involve computer software 
(project scheduler routines) to optimize not just productivity but also 
grojp overlap. 

(b) Incorporate boundary-spanning roles in the SSOC social system, 
open question is hew to interface these roles with the activities of 

the Space Station's Mission CcanmarJer and other officers. 

(c) Structure interpersonal contact among crew members to promote 
ochesive, non-polarizing relations across the subgrxji^js in SSOC. Crew 
monbers mi^t be assigned tasks with an eye to creating interdependence 
and cross-linkages between nationality groins. Likewise, module living 
and slewing assignments mi^t be made to promote contact across 
nationalily groups. 

(d) Use of the coraraunication media on board the Space station to 
pranote non-polarizing interpersonal contact and cross-linkages between 
members of subgra^. Computer-mediated communication is especially 
problematic in this respect, for it may worsen, not improve, the 
prospects for intergroip conflict. NASA may wish to develop some rules 
or "etiquette" regarding use of computers for communication. 

^ (e) When moving from IOC toward SSOC, NASA may need to make some 
adjustments in the criteria used to select crew members and in the 
content of Astronaut training. In this regard, a researciydesign issue 
for NASA is to discover vMch personal attributes of crew members best 
serve to enhance linkages between subgroi^ in SSOC. Another issue is 
to determine vdiat conflict resolution skills should be tau^t to crew 
members. 



Issues Regarding Response to Crises in SSOC 

Ihe SSOC social system may have more difficulty than the lOC system in 
mobilizing to deal with various crises and tsmergencies on board. This 
will occur not only because SSOC is a larger system, but also because 
It IS more heterarchical in fonti with decentralized decision-making. 
Ihe broad z^seardh/design, question for NASA is how best to structure 
the SSOC social system so that it can mobilize adequately for crises. 
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Sane writers have suggested placing control during crises in the hands 
of a specialized safety officer or "crisis leader." This proposal has 
saoB Kierit, but a better alternative may be to recentralize control 
around the regul-^ Mission Commander, NASA may wish to investigate 
this research/design issue more closely. 

Moreover, NASA mi^t investigate the use of AI e5^)ert systems to 
help deal with crises— the software system becomes the crisis advisor, 
assisting or even si^jplanting human decision-making. Use of e^^jert 
systems in this context may iirprove diagnosis of the problem, as well 
as increase speed and accuracy of response to the emergency. 

Finally, NASA may wish to investigate the (in) effectiveness of 
ocaDDputer^mKiiated coratnunication during crises. Whether 
ocnprtrer-iftediat^ coraraunication eriiances or inhibits responses to^ 
crises is an open question. Some crises on board the Space Station 
may have clear-cut diagnoses, but for those that do not, 
cowputer-mediated ccanraimication may prevent or dimnish an adequate 
response frcm the crew. The effects of computer-mediation on 
ccanmanication during crises iterits scrutiny. 



REFERENCES 

Adams, S. 

1976 The structure and dynamics of behavior in organization 
boundary roles. In M. D. Dunette, ed.. Handbook of 
Industrial and Orcfanization ?>l Ps ydholooy . Chicago: 
Rand-McNally. 

Anir, Y. 

1969 Contact hypothesis in ethnic relations. Psychological 
Bulletin . 71:319-342. 

1976 The role intergroc^) contact in change of prejixiice and 
ethnic relations. In P. A. Katz, ed., Tc^Tards the 
Elimination of Racism . New York: Pergamon. 

Balbaky, E. M. L. 

1980 strike in Space . Case #1-431-008. Boston, MA: Harvard 
BJisiness School. 

Elate, R. R. , and Mofuton, J. S. 

1968 Corporate Excellence Ihrouah Grid Orcfanizati on Develcment. 
Houston: Gulf. 

1976 Diary of an CD Man . Houston: Gulf. 

1984 Restoring Trust Between Groups in Conflict . San Francisco: 
Jossey-Bass. 



ERIC 



389 



384 

KLuth, 3. J. 

1980 Social and psychological prdblems of extended space 
missions. AIAA International Ifeetinq and Technical Display 
"Global Te chnology 2000" . New York: American Institute of 
Aeronautics and Astronautics. 

1981 Soviet space stress. Science 81:2:30-35. 
Bolton R. 

1979 People Skills . Englewood Cliffs, NT: Prentice-Hall. 
Brewer, M. B. 

1986 Ihe role of ethnocentrism in intergroi^) conflict. In 

S. Worchel and W. G. Austin, eds., Psvcholoov of Inceraroup 
R elations . Chicago: Nelson-Hall Publishers. 

Brewer M. B., and Carrpbell, d.T. 

1976 Ethnocentrism and I ntercnroup Attitudes . Nav York: Halsted 
Press. 

Canpbell, D. T. 

1965 Ethnocentrism and other altruistic motives. In D. Levine, 
ed. , Nebraska Symposium on Motivation . Vol. 13. Lincoln: 
University of Nebraska. 

Casti J. L. 

1979 Chapter 4 in Connectivi ty. Complexity, and Catastrophe in 
large-sca le Systems . New York: Wiley. 

Connors, M. M. , Harrison, A. A. , and Akins, F. R. 

1984 Living Aloft: Human Recaiirements for Extended Spaceflight . 

NASA SP-483. Washington, DC: U. S. Government Printing 
Office. ^ 

Cooper, H. S. F., Jr. 

1976 A House in Space. New York: Holt, Rinehart, and Winston. 

C3ooper, J. and Fazio, R. H. 

1986 The formation and persistence of attitudes that si^port 

intergroi^ conflict. In S. Worchel and W. G. Austin, eds.. 
Psychology of Intero roup Relations . Chicago: Nelson-Hall 
Publishers. 

Cunnin^iam, w. 

1977 The Ail-A merican Boy s. New York: Macmillan. 



390 



385 

Danford, G. S*, Dry, C. Ericson, J. E., Ereitas, Jr., R. A., Hays, 
D. G., Lewis, Jr., W. C., Marsolan, Jr., N. F., Ifezlack, L. J., 
Schoorihoven, C. K., Sheskin, T* J*, Wallace, R. S., Wellens, A. R*, and 
Wise, J. A* 

1983 Evolution of space station autonoonoy. Chapter 7 in Autoncfw 
and the Human Eleinent in Space . Final Repo:rt of the 1983 
NASVASEE Summer Faculty Workshop, KPSh. 

Danford, G. S., Ericson, J. E., Freeman, H. J., Hays, D. G., I^is, 
Jr., W. Schoorihoven, C. K., Sims, H. P., Walsh, P. J., Wellens, A. 
R. , aixi Wise, J. A. 

1983 Humane space station. Qiapter 5 in Autonomv a nd the Himon 

Element in Space . Final Report of the 1983 N7iSA/ASEE Summer 

Faculty Workshop, NASA. 

Danford, G. S., Ericson, J. E., Marsolan Jr., N. F., Mazlack, L. J., 
Schoorihoven, C. K., Wellens, A. R., and Wise J. A. 

1983 Autonomy in the space station context. Qiapter 2 in 
Autonomv and the Human Element in Space . Finai. Report of 
the 1983 NASA/ASEE Summer Faculcy Workshop, NASA. 

Deutsch, M. 

1973 The Resolution of Conflict . New Haven: Yale University 
Pre-ss. 

Diab, L. 

1970 A st:uay of intragroup and intergroi?) relations among 

e5q5erimentally produced small groi:?)s. Genetic Psychology 
Monographs 82:49-82. 

Geller, V. J. 

1980 Toward a Theoretical Framework for Investigating Modality 
Effects . Bell laboratories Technical Memo. Murray Hill, 
NJ. 

Hall, E. T. 

1968 Proxemics. Current Anthropolog / 9:83-108. 

Harrison A. A., and Connors, M. M. 

1984 Groi:ps in exotd.c environments. In L. Berkowitz, ed. , 
Ad vances in Experimental Social Psychology . Vol. 18. Ne^r 
York: Academic Press. 

Helmreich, R. L. 

1983 inlying psychology in outer space: Unfulfilled promise^ 
revisit:ed. American Psychologist 38:445-450. 



391 



386 

Hfelmreich, R. L., wilhelm, j., Tanner, T. A., sieber, J. E., and 
Burgenbach, s. 

1979 A Critical Review of t he Life Sciences M^aement at Ames 
Research Center f or Soacelab Mission Develonment Test III . 
NASA Tech. Paper No. 1464. 

Ifenschy, T. , and Glass, D. C. 

1968 Evalioation apprehension and social facilitation of dominant 
and subordinate responses. Journal of Personality and 
Social Psychology 10:446-454. 

Holmes, J. G. , Ellard, J. H. , and Lamm, H. 

1986 Boundary roles and intergroi?) conflict. In S. Worchel and 
W. G. Austin, eds., Psycholocfy of Intergroup Relations . 
Chicago: Nelson-Hall Publishers. 

Johansen, R. , Vallee, J. , and Spangler K. 

1979 Electronic Meetings. Mienlo Park, CA: Addison-Weslcy. 

Katz, D., and Kahn, R. L. 

15^^ Ihe Social Fsynholn qy of Organizations . New York: Wiley. 

Keeney R. L. , end Raiffa, H. 

1976 Decisions with Multip le Objectives: Preferences and Value 
Tradeoffs . New York: Wiley. 

Kiesler, s., Siegel, J., and MoGuire T. W. 

1984 Social psychological aspects of coitpiter-mediated 
communication. American Psychologist 39:1123-1134. 

Klirtzman, C. R. , Marsolan Jr, , N. F. , Mazlack, L. J. , Rinalducci, E. 
J., Tqpham, W. S., Walsh, P. J., and Wong, D. 

1983 Monitoring and control. Chapter 4 in Autonomy and the Human 

Element in Space. Final Report of the NASA/ASEE Summer 

Faculty Workshop, NASA. 

leitman G. , ed. 

1976 Multicriteria Decision Making and Differential r^rnP-g . New 
York: Plenum Press. 

leonov, A. A,, and Lebedev, V. I. 

1975 Psychological Proble ms of Interplanetary Flight. NASA Tech. 
Translation. NASA TT F-16536. 

Marcus H. 

1978 The effect of mere presence on socia3. facilitation: An 

unobtrusive test. Journal of Experimental .qor^ial Pcynhnir^r 
14:389-397. ~ — " ^ ^ 

Mehrabian A. 

1972 N onverbal Communica tion. New York: Aldine-Atherton. 



332 



387 



Mesarovic, M. D., Macto, D. , and TaKahara, Y. 

1970 Theory of Hierarchical. Mi\ltilevel. Systems > New York: 
Academic Press. 

Michener, H. A., Delamater, J. D., and Schwartz S. H. 

1986 Chapter 15 in Social Psychology > San Diego: Barcourt Brace 
Jovanovich. 

Nelson, P. D. 

1973 The indirect observation of groups \ander confinement eond/or 
isolation. Pp. 167-194 in J. E. Rasmussen, ed. , Man in 
Isolation and Confinement , Chicago: Aldine. 

Norvell, N., and Wbrchel, S. 

1981 A reexamination of the relation between equal-status contact 
and intergrxx?) attraction. Journal of Personality and 
Social Psycholocfy 41:902-908. 

Oberg, J. E. 

1981 Red Star in Orfait , New York: Random House. 
Owen, G. 

1982 Game Theory . 2rd edition. New York: Academic Press. 
Pogue, W. R. 

1985 How Do You Go to the Bathroom in Space? New York, NY: 
Tom Dcherty Associates. 

PLtlitt, D. G. 

1981 Nea oticition Behavior . New York: Academic Press. 

Pruitt, D. G. , and Rubin, J. Z. 

1.986 Social Conflict . New York: Random House. 

Rubin, J. Z., and Brown, B. R. 

1975 Th f^ Soi:;ial Psychology of Barnainina and Negotiation . New 
York: Academic Press. 

Schoorihoven, C. B. 

1986 Sociotechnical considerations for the development of the 
space station: Autonamy and the human element in space. 
Journal of Applied Behavioral Science 22 : 271-286 . 

Sells, S. B., and Gunderson, E. K. 

1972 A social-systems approac±i to long duration missions. 

Pp. 179-208 in Human Factors in lona-IXuration Spaceflight . 
Washington, DC: National Academy of Sciences. 

Sherif, M., Harvey, 0. J., White, B. J., Hood, W. R., and Sherif C. 
1961 Intergroup Cooperation and Competition: The Robbers Cave 
Experiment . Norman, OK: University Book Exchange. 



Er|c ' 393 



388 

Shubik M. 

1982 Game Theci-y in the Scx;ial Sciences; Concepts and 
Solutions , Cambridge, MA: MET Press. 

Sloan, A. W. 

1979 Man in Extreme Environments , Springfield, IL: Thomas. 

Sutherland, J. W. 

1975 rp. 32-38 and Chapter 2 in Systems; Analysis. 

Administration and Architecture , New York: Van Nostrand 
Reinhold. 

Tajfel, H., and Turner, J. C. 

1986 The identity theory of intergroiqp behavior. In S. Worchel 
and W. G. Austin, eds.. Psychology of Intercnx>uD Relations . 
Chicago: Nelson-Hall Publishers. 

Von Neimann, J. 

1966 Theory of Self-Reproducincr Automata . Uzbana: University of 
Illinois Press. 

Von Tiesenhausen, G. 

1932 An Appix>ach Toward Functjon Allocation Between Humans and 
Machines in Space Station Activities . NASA TM-82510. 
Marshall Space Fli^t Center, Alabama. 

Vorc±>'ey, N. N. 

1977 Game Theory; Lectures for Economists and System 
Scientists . New York; Springer-Verlag. 

Wall, J. A. 

1974 Some variables affecting a constituent's evaluacions of and 
behavior toward a boundary role occipant. Orcranizational 
Behavior and Human Performance 11:390-408. 

Walton, R. 

1969 Interpersonal Peacemakincr: Oonfrjntations and 

Ihird-Party Consultation . Reading, MA; Addison-Wesley. 

Weinberg, G. M. 

1975 Chapter 7 in An Introduction to General Systems Thinkiirr . 
New York; Wiley. 

Wilder, D. A. 

1981 Perceiving persons as a group: Categorization and 

intergroiqp relations. In D. L. Hamilton, ed., Cocmitive 
Processes in Stereotyping and Interrrroup Behavior . 
Hillsdale, NJ: Erlbaum. 



ERLC 



334 



389 



1986 



Wilder, D. 
1981 



CJognitive factors affecting the success of intergroup 
contact. In S. Worchel and W. G. Austin, eds., Psychology 
of Intercoroup Relations , Chicago: Nelson-Hall Publishers. 

A,, and Cooper, W. E. 

Categorization into groups: Consequences for social 
perception and attributions. In J. Harvey, W. Ickes, and R. 
Kidd, eds., Kew Directions In Attribution Research . Vol. 
3. Hillsdale, NJ: Erlbaum. 



Worchel, S. 

1986 The role of cooperation in reducing intergroi^) conflict. In 
S. Wbrchel and W. G. Austin, eds., Psvcholocfy of Intercoxaip 
Relations . Chicago: Nelson-Hall Publishers. 

Worchel, S., Andreoli, V. A., and Folger, R. 

1977 Intergroi5> cooperation and intergroijp attraction: The 
effect of previous interaction and outcome of combined 
effort. Journal of Experimental Social Psychology 
13:131-140. 

Worchel, S., Axscrn, D. , Ferris, F., Samaha, C, and Schweizer, S. 

1978 Determinants of the effect of intergroup cooperation on 
intergroi:?) attraction. Journal of Conflict Resolution 
22:429-439. 



Zajonc, R. B. 

1965 Social facilitation. 



Science 149:269-274. 



395 



ERIC 



DISOJSSICN: CCNFLTCr AND STRIiSS IN THE SPACE STAnOI 



Oscar Grusky 



Ihe primary questicn both Midhener and Cook's papers are concerned with 
is rhe inpact of social factors on the performance of human graaps in 
DBnned vehicles in space missions of long duration. My ccsnments first 
address scane issues raised by Michener. Ihen I turn to selected 
portions of Cook's paper. Finally, I make seme general observations 
and conclude by arguing that a need exists for a systematic data base 
on social system processes based on past long duration space flints. 



OCWMENTS CN MECHEMER'S PAPER 

The theme of Michener's paper is the iupact of social system factors on 
the management of systeQ conflict. He asserts that as crew size 
increases, crew ccatposition beccanes more varied, system goa:>.s became 
more ccaipl^x and diverse and onboard artificial intelligerx:^ and 
ccarputerization increases, the likelihood of control and conflict 
problems will beccsne greater because of social system failures. Such 
failures cane about in part because of the greater cc^rplexity, 
differentiation, sid decentralization that is created by changes in 
crew sir3 and coiposition, technology, and goals. 

As Michener notes, the space station crews confront a perilous 
environment and one that they must deal with largely on their own 
(Michener does not mention but is no doubt cognizant of the fact that 
under the current design there is no way a crew member can return to 
earth in an emergency, since there is no escape vehicle) , relative 
isolation, and a long period of time in space, i.e. 90 days. The SSOC 
system will have to d^ with very complex svpervisory control 
problems, the risk of intergroip conflict, and the necessity of coping 
with serious crises. 

One contributing cause of conflict in the space station, acceding 
to Michener's analysis, is modularity. Modularity refers to a social 
system cotposed of multiple and distinct subgroips. Michener claims 
that modular systems may be particularly viiLnerable to conflict, 
miscoordination, lack of cooperation, and mistrvist. 

Because space station must function in such a perilous environment 
it is vulnerable to the risk of exogenous shock, that is, an 
imcontrollable event. More conplex social systems are pj.-esumably less 
capable than less ccsiplex social systems of coping with puch exogenous 
shocks. 
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Naturally, one of the first questions one asks viien confronting a 
theory such as this is hew does it square with the available evidence, 
realizing that inost evidence is earth-based and therefore only 
partially relevant or relevant to an indeterminate degree. There is, 
however, additional evidence, also of limited or of indeterminate 
value, that may be obtained from c±>servations on group performance in 
long duration space flints that have alread^^ been landertaken. 
Unquestionably, there is a need for additional systematic research on 
the problems of group conflict and performance in the space station. 



Effects of Groap Size and Canplexity 

Michener suggests that S30C is liJ^y to es^jerience greater conflict 
than earlier missions, in part, because the social system will be 
larger and more catplex. However, the evidence on the effects of groiip 
size is not uniform. There is no doubt that as grov^) size increases 
the potential number of intragroup relations multiplies. But the 
effects of group size on factors such as member commitment, 
coc^)eration, and group performance are unclear. For exairple, Michener 
suggests that larger-sized groups have weaker member camondtment than 
smaller-sized ones. However, Doll and Gundersen (1969) studied 
Antarctic groi:5)s and found that perceptions of members of coipatibility 
were vara favorable in larger (size 20 to 30 members) than smaller 
grojps (size 8 to 11) . More recently, Yamagishi (1986) studied 
laboratory-created groi?)s of size 2, 6, 11, 51 and 501 in order to 
stucfy social dilemma or public good situations.-^ Siabjects were told 
they would be given $5 and would be asked to give any number (0 to 5) 
of one dollar bills to others in the groiqp (group condition) or to 
matched participants (give-away condition) . Yamagishi found that once 
group size exceeded ten, additioiial size increases had no effect on 
member contribution level. The point is that earth-ba&ad studies of 
the effects of group size on both utilitarian and affiliative t;/pe 
group goals have not produced uniform findings. 



Conflict 

Michener is not specific about the causes of conflict, but the close 
interactional situation in the space station proviaes the potential for 
seemingly minor events to stimulate interpersonal hostility. For 
Gxanple, there is waiting to gain access to the toilet. It takes 
longer to use zero-g facilities axxi space constraints will mean a 
limited number of toilets. Hence, long waits esf^ially viien waking vp 
may be common, and questions of priority may produce conflict. 

As Michener points out, since no large social system has been 
established in space, there are no alternatives but to develop 
generalizations based on earth-based groups. However, potentially 
suggestive information may also come from extrapolating from 
observations on smaller-sized groups that have been in space, such as 
Sl^lab. Pogue, (1985) a Skylab astronaut vdio spent 84 days in space. 
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has written a book describing some of his e3q)eriences. Two others 
acxxHpanied Pogue on his long mission, the Oammander (Carr) and the 
Scientist Pilot (Gibson) • Pogue reported that overall the crew got 
alor^ well together and that they had so many equipment prablems that 
they "had to help each other often. We had good team spirit." Very 
little space in his booJc was devoted to the subject of interpersonal 
conflict. In response to a question on fi^ts and arguments among the 
crew, he observed: •'We didn't have any fi^ts, and there was only one 
argument that I can rKall. It had to do with a change in procedure, 
and the instructions were very vague* We resolved this by trying the 
procedure to see if it worked* We never got truly angry at each other, 
but we were frequently i^^set with or had disagreements with soire people 
in Mission control. We were all tryirg hard to get a jcb done, so 
there was probably fault on both sides at one tiine or another" (Pogue, 
1985:67) . TSiesG comraents suggest first, that the crew was reasonably 
well-integrated and supportive of one another, and second, that groiqp 
identification was to scane extent strengthened as a product of 
antagonism toward Mission Control. 

Pogue recounts only one incident \liat took place between him and the 
Scientist Pilot that could be characterized as a disagreenent: "I 
think I X55set Ed Gibson one day by putting his ice cream in the food 
warmer and leaving his steak in the freezer. I really felt badly about 
it. He couldn't eat the steak because it was still frozen hard, and 
the ice cream had turned to milk. He had to dig out sane contingency 
food to eat. Ihere wasn't too much conversation at dinner that ni^t. 
He salvaged the ice cream by refreezing it. In liquid form it had 
turned into a big hollow ball. Ihe next day, after it r^froze, he 
stuffed it full of freeze-dried stravflserries and had the first 
strawberry sundae in space" (Pogue, 1985:67) . Attention to these 
ccatiments is called mainly to suggest the need for collecting and 
analyzing systematically social system data on conflict alread/ 
collected from long duration missions, such as Skylab and Salyut. 
Analysis of these data may help in identifying potential social system 
sources of conflict on space station. Ihe Russians have had a small 
space station, Salyut 7, in orbit for almost five years and have manned 
that station periodically since then. About a year ago they launched 
the first element of a modular station vdiich is designed to be 
permanently manned* Bluth (1984) has reported on Soviet evidence of 
strong interpersonal hostilities among the crew on the Salyut missions. 



Mission Length, Conflict, and Eb^jectations 

As Michener notes, the projected length of space station missions is 90 
days. Another reason for carefully examining groap factors in the 
Carr-Gibson-Pogue Skylab mission is that its length was 84 days or 
almost the same as the proposed space station missions. As noted 
above, the Russians also have coitpleted long duration missions that are 
of interest. Iheir experience with such missions exceeds ours. 
Michener argues that the long length of the space station missions may 
lower crew tolerance and encourage greater subgroup conflict. Ifowever, 
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Pogue (1985) and the New Yorker report (CJooper, 1976)"^ both note that 
mission length did iiot constitute a prc±>lem on Skylab in the sense of 
elevating interpersonal tension. Ihe crew apparently did get very 
disturbed vftien Mission Control prcposed near the end of the mission the 
Idea of lengthening it. It appeared that two factors contributed to 
the crew's strong dissatisfaction with this idea. First, the crew was 
trained and geared fran the start for an 84 day mission. They had 
prepared themselves both mentally and physically with this period of 
time in mind. Hence, a prcpc^ed change in the schedule greatly vpset 
their e55)ectations and was dissonance-arousing. Second, and relatedly, 
the very fact that it was raised as an issue by Mission Control at the 
crucial point in the mission may have seriously landermined the crew's 
sense of personal control over their actions. These were very proud 
and extremely capable individuals with a strong sense of personal 
autoncartty. Uie ti^t daily scheduling of their actions and the close 
observation and monitoring of even minute aspects of their behavior 
over a lar^ period of time may have been threatening and 
stress-arousing to these ccarpetent and autonomous individuals. The 
conposition of these groups and their training was designed to mute 
social system conflict, promote strong groap integration, and 
strengthen identification with the gKoap goal or mission. However, 
such strong identification with the groap goal may inhibit 
extemally-induced changes in the mission. Presumably any such 
changes, if groap resistance is to be avoided, must involve a 
participative process worked out in advance. 

In addition to this issue of whether or not greater size and 
differentiation actually contribute to greater groap conflict, there is 
the matter of the consecaiences of such conflict for groap functioning, 
and in particular, productivity. Michener assumes that conflict will 
increase with greater differentiation and catplexity, and furthermore, 
that conflict in general is detrimental to groap performance. There is 
not a great deal of evidence on this, and wiat exists, is earth-based. 
Michener, like most students of conflict, sees conflict as creating 
disequilibrium in the system. Conflict may cause a "breakdown in 
decision makii^" (March and Simon, 1958), that is, it is a malfunction 
and is negatively valued. Hcwever, other social scientists, such as 
Coser (1966) look at certain kirds of conflict as a source of 
equilibrium and stability. Coser argues that a multiplicity of small 
conflicts internal to a groiqp may breed solidarity provided that the 
conflicts do not divide the grot?) along the same axis, becaiose the 
conflict coalitions provide a place for exchanging dissenting 
opinions. In essence, he claims that some conflict or disagreement is 
inevitable and that it is better to foster minor conflicts of interest 
and thereby gradually adjust the system, than to allow for the 
accumulation of many latent deep antagonisms that could conpletely 
disn^rt: it. Coser notes that frequent small conflicts keep antagonists 
informed of each other's position and strength and hence prevent a 
serious miscalculation on the part of either party. In a similar vein, 
lipset et al. (1956) in a stuc^ of the International Typographer's 
Union showed how institutionally-regulated conflict between the two 
political parties in the vmion actually fostered a democratic climate 
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and organizaticjnal stability. Likewise conflict between mocJules inay 
take the form of healthy ccjipetition and tliis itay enhance overall 
procJuctivity. Ihus, conflict and ccarpetition are not inherently 
(^ftmctional as Michener suggests. CJontrary to Michener's apprx>ach, 
this perspective suggests that a key issue is not merely how much 
conflict takes place, but the conditions vmder vdiich conflict occurs, 
for exannple, the extent to vdiich it is normatively regulated and 
controlled. 



Crew Rotation 

Michener mentions only briefly that rotating crews under extended 
duration i^ce fli^t may effect their functioning. The effects of 
rotation, succession, or turnover, merits more detailed treatment. 
Ihere is a substantial literature on this topic concerning the effects 
of rate of succession on grojp and managerial effectiveness (e.g. Se^ 
Gruslqr, 1963, 1964; Brcwn, 1982). Practical research questions 
include: optimal mission length, qptinal method of crew rotation 
(r^lace individuals, subgroi^js, or total crews) , optimal method of 
leader rotation, etc. 



COMMENTS ON OOOK'S PAPER 

Cook's paper is concerned first of all with stress and the relationship 
betv^en stress and productivity. In addition, she examines the issue 
of mediated camnainication, particularly cotputer-medieted communication 
and its effects on productivity. 



Stress 

Cook proposes that space be used as a site for basic research on 
stress. She points out that reliable and valid non-physical 
health-related measures of stress are lackLjg. Space station is a good 
site for stress research, she claims, because there are so mary 
stressors in space, such as crowding, noise, workload, and 
life-threatening crises, she describes a model of stress prxxiuced by 
interpersonal factors such as inequitable assignment of rewarxis, task 
or role aittoigui-ty, arbitrary exercise of authority, and others. Cook 
wishes to conplement physiological and psychological stress research by 
investigating social system properties of stress, an approach that has 
not been heavily utilized in the past. She also wants to ej^lore 
adaptive groijp strategies for coping with stress, she proposes the 
intriguing idea of developing a coapater-aided system to rectify 
cognitive processing deficiencies that appear under hi^ stress 
levels. Kcwever, one of the problems v/ith stress measurement is that 
so many factors can be stressful that objective quantitative 
msasurenent is difficult. 
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Gender and Stress 

Althout^ up to the present space missions have been itale-dominated, it 
is evident that future missions will involve irore female astronauts and 
mission specialists. Research in psyciiiatric ^idemiology has 
consistently documented an association between gerder and psychological 
distJtress. Women are more than twice as likely as men to r^rt 
affective disorders and extreme levels of distress (Al-Issa, 1982; 
Fessler and McE?ae, 1981) . Althou^ male prevalence of scm^ psychiatric 
disorders is greater than females and for some disorders there is no 
r^>Drted association with gender, the best available evidence indicates 
that the psychological well-being of warcen is different than that of 
men. 

TtiB major sociological interpretation of this evidence is that 
woft^'s roles expose them to greater stress than men's (Gove, 1978) . 
Gove (1972) has claimed that female role stress is especially 
pronounced in traditional role situations. 

A number of investigators have shewn that women are more vulnerable 
than men to a range of viiat have been called network events, that is 
life crises that are significant to the lives of persons important to 
the respondent (Kessler, 1979; Eadloff and Rae, 1981) . Kessler has 
proposed that wcanen care more about people, and becaxase this is the 
case, they are more vulnerable to crises that take placa "at the edges 
of their caring networks." (Kessler, 1985) . Men are emotionally 
affected by crises that occur within their nuclear family, but women 
are more de^ly r^f fected by both Ci.ises among members of their nuclear 
family and among persons vAio may be classified as friends and 
associates. 

There are a number of major limitations in tlie analysis presented 
above: 

1. The findings showing a relationship between gender and psychiatric 
distress and subclinical distress can be e35)lained by selection 
factors. 

2. Most of the evidence on role-related stresses has been based on 
scales xising subjective evaluations. 

3. EvideiK:e on the differences suggested between men and women claiming 
that ttie latter are more vulnerable to crises in their networks is 
^)arse. 

Despite these limitations of vMch Cook is well aware, this 
information and the speculations described above raise some potentially 
important issues regarding long duration space missions. Specifically, 
one issue is viiether or not male and female crew members will taJce on 
different roles and respond differently to crises that may take place 
in the space station. Kanter (1977) has studied the lone woman in 
male-dominated work organizations as part of her study of vtett she 
calls "skewed sex ratios." She has distinguished between dominants and 
tokens in these organizations and suggests that (1) tokens are more 
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visible than daminants (2) differences between dominants aM tokens 
tend to be polarized and (3) tokens' attributes tend to be "distorted 
to fit pre-existing generalizations about their social type. " At issue 
is the effect (if any) of the gender distribution in the grx?) on 
COTiraand, control, and coiranunication processes. It nay very well be the 
case that selection factors that have to new worked well in 
identifying crew members capable of handling stress will continue to 
work effectively in the future. It is also reasonable to anticipate 
that besides selection effects, situational effects will be 
overpcwering and hence the gender differences suggested above will be 
masked. Alternatively, it may be that the larger-sized groups in space 
station 1990s combined with the existence of a "ska-zed sex ratio" 
(Kanter, 1977) in vjork groaps will have problematic iirpacts on groi^) 
functionirig. Research is needed to ej5)lo2:B these and related issues. 



Coirputer-Mediated Communication 

As Cook has observed, the spcial consequences for systems of long 
duration vdiere the primary cconmounications are conpiter-mediated are 
siirply unknown. As Cook notes, the receipt finding by Siegel et al. 
(1986) that conputer-mediated communication facilitates the i^jward flow 
of negative communications or information that challenges those in hi^ 
status positions merits replication. This problem also should be 
studied develqpmenta^.ly to see if changes occur as groups exist over 
long periods of time. Another related problem that marits study is the 
potential irpact of cultural differences on catpiter mediated 
communication. People of different cultural backgrounds may respond in 
radically different ways. Such differences if found could be 
consequential to communication between the various space st^^tion 
modules, the Japanese, European, and that of tne United States. 

Cook cites Connors (1985:32) iresearch as justification for the 
proposition that "computer mediation may mitigate the inhibiting 
effects of face-to-face communication when "subordinates" have access 
to critical information and may need to challenge authority." However, 
Connors' groi^^s bear little resemblance to the environment e>5)erienced 
by past long duration space flints or presumably will be faced by 
future fli^t crews, such as wei^tlessness, continuous peril axvi 
public exposure, continuous hi^ task-load, small amounts of space per 
person, etc. Moreover, the idea of challenging authority axvi attitudes 
toward work are culture-bound. Hence, even if the findings were 
applicable to the United States' space module, they would not 
necessarily be as applicable to the Japanese or European modules. 



ooNcnjDiNG comEms 

Most of the cominents in the two papers focus on negative effects such 
as conflict, stress and miscommunication. Michener stresses the 
perilous environment, the possibililY of conflict between modules, 
human error possibilities, and breakdown possibilities that stem from 
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the sophistication of the technology. Michener neglects the potential 
positive contritfutions of small conflicts and conpetition to groip 
functioning providing that such conflict ai>d corrpetition is 
institutionalized and is expressed in legitimate ways. Cook focuses on 
the prc±)leras of decisional and interpersonal stress. Yet, in contrast, 
vdiat was hi^i^ted in the narrative reports, both by Pogue (1985) and 
Ihe New Yor3<er (Cocper, 1976) accounts, was the relatively smoothness 
of interpersonal relations among the Skylab crews, their hi^ 
motivation, hi^ productivity, hi^ goal identification, and groip 
commitment. Perhaps these reports have been "sanitized". In arv/ case, 
it is clear that the social system iitpacts with respect to conflict and 
stress are unknown, althou^ we do know that these factors can have 
consequential effects, and as Michener suggests, increasing social 
system cortplexity may enhance the likelihood of social system problems. 

Both the Cook and the Michener papers stress the iitportance of 
social organizational factors on productivity or performance. Cc?ok 
calls attention to the work of Foushee (1984) \Aio has used fli^t 
simulators to study grocp process. Foushee cites a stuc^ by Ruffell 
Smith (1979) v*io had B-747 crews fly a sijttulated fli^t from New York 
to London. A failed engine, hydraulic system failxare, poor weather, 
and other problems created an emergency situation. Foushee observes 
significantly that "Perfiaps the most salient aspects of this fli^it 
similation study was the finding that the majority of problems were 
related to breakdowns in crew coordination, not to a lack of technical 
knowledge and skill ." Research on social factors affecting groip 
conflict, stress and other related issues as both !lichener and Cook 
have observed, is essential. 

In summary, four major observations were made on Michener 's paper, 
as follows: 

1. Findings from earth-based laboratory and field research on the 
effects of groip size and coaoof-'^^exitY on task performance have 
produced inconsistent results. 

2. Michener 's social system theory suggests considerable potential for 
group conflict on the space station. However, narrative accounts 
describing a Skylab mission do not conform to this theory. 

3. Michener 's theory assumes that conflict and coarpetition (seen as a 
form of conflict) has only deleterious consequences for social 
systems and this may net be the case v*ien conflict is 
institutionally regulated. 

4. Michener omits extensive discussion of problems associated with crew 
rotation. 

Ihe following cteervations were made on Cook's paper: 

1. The development of new methods of measuring stress and coping 

techniques are needed. Existing data on Skylab crew behavior should 
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be examined in ortier to identify ef fec±ive interpersonal coping 
strategies, that is, techniques that cre^^r members have used that 
reduced, controlled, or made stress more tolerable. 

2. Research is needed to e>5)lore systematically the relationship 
between gender, groi:qp structure, and stress. 

3. Research is needed on the social impacts of conpater-mediated 
ccomttunication. We need to knew the positive and negative 
consequences of coirpiter-mediated communication for individual and 
groip decision processes. Cook has identified a set of hypotheses 
that inerit intensive stucfy* 

Scans of these problems can best be studied by means of human 
simulations \diere the space station situation is simulated in the 
laboratory by means of a mock-i?) and human crews of ei^t to ten or 
even twenty volunteer subjects are studied continuously in the 
laboratory for long periods of time. The crews would be given 
carefully assigned tasks as similar as possible to those to be 
performed by space station crews. The noise level is manipulated as 
are living conditions to approximate as closely as possible the real 
situation. Ideally, one would develop a set of e35)erimental studies 
nsing the simLation method which would enable the close study of the 
effects of key independent variables such as authority structure on 
crew productivity, performance, and satisfaction. The same technique 
could be eirplqyed to examine the effects of various methods of crew and 
leader rotation. 

A fundamental research recommendation should be added to those noted 
by Michener and Cook, namely the need for development of a systematic 
data base in the area of group per-formance of past (and future) 
astronauts in long duration space missions. Such a data base is 
especially needed because the space station is a unique environment due 
to the interaction of a very unusual set of characteristics such as 
wei^tlessness, constant danger, restricted or canputer-mediated 
cotrounications, hi^ stress due to noise, and other environmental 
hazards. Valuable althou^ limited information can be obtained from 
studies of social systems facing quite different but presumably 
ccfftparable situations such as polar environments and long duration 
submarine missions. Hence, there is a great need for data on this 
particular of social system that is unique to long duration space 
missions. The types of data that should be included in such a data 
base are demographic information on the astronauts, performance data, 
and perhaps most important of all, aiadio and videotapes of missions, 
such as the three-person Skylab missions discussed above. Research 
access to these tapes would facilitate development of new measures of 
stress and conflict and their relationship to decision processes and 
would permiu study of microgroi:^ processes such as initiation of 
interaction, rates of interaction, and measures of power (such as 
intem^jtions, talkovers, and overlaps, etc.) . The hope is that NASA 
mi^t be convinced that a data base of this kind would be a valioable 
research resource for them and that such a data base could be assembled 
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and the data analyzed in such a manner as to cx)nceal aj^rqpriately as 
necessary the identities of particular astronauts and their specific 
missions. 



NOTES 

1, Obviously Yamagishi did not create actual groips with 501 members in 
the laboratory. Instead, he allcwed no cornraunication or contact 
between subjects, \Aio were isolated from one another, and told them 
the number of persons in their "groi^)" • No data were presented on 
the validity of this manipulation, 

2. The New Yorker account also suggested that the three-person Skylab 
crews varied substantially in their productivity. One major 
determinant of this variation was how much was demanded of them by 
Mission Control. When a point was reached that seemed to the 
members of the crew to overtax their capacity, they oonplained and 
Mission Control reduced the workload. 



REFEKENCES 



Al-Issa, I. 

1982 Gender and adult psychcfpathology. I^. 54-84 in I. Al-Issa, 
ed. , Gender and Psycfaopatholocfv . New York: Academic Press 

KLuth, B. J. 

1984 Pilots of outer space. Society 1/2:31-36 
Brcwn, M. C. 

1982 Administrative succession and organizational performance: 
the succession effect. Administrative Science Quarterly 
27:1-16. 



C3onnors, M. M. , Harrison, A. A., and AtSdns, F. R., eds. 

1985 Living aloft: Human Requirements for Extended Spaceflight , 
NASA 



C3ooper, H. F. S. 

1976 A Reporter at large. New Yorker 9/10:34-70 

Ooser, L. 

1966 The Functions of Social Conflict . New York: The Free Press 

Doll/ R. E. and Gunderson, E. K. E. 

1969 Hobby interests and leisure activity behavior among station 
members in antarctica. U.S. MNMRU . Rep. No. 69-81 



405 



400 



Foushee, C, 

1984 Pi*ads and triads at 35,000 feet: factors affecting groap 
prcx::ess and aircrev; performance. Ainerican Psycholocfist 
39:885-893. 

Gove, W. R. 

1977 Ihe relc ticnship between tlie sex roles, marital status, and 
mental illness. . ;ocial Forces 51:34-44 

1P78 Sex differences in mental illness among adult men and women: 
an evaluation of x -nor questions raised regarding evidence on 
the hi^er rates ox wijen. Social Science and Medicin e 
123:187-98 

Gnas]<y, 0. 

1963 Managerial succession ai^ organizational effectiveness. The 
American Journal of Sociology 59:21-31. 

1964 The effects of succession: a cortparative stuc^ of military 
and business organization, in M. Janowitz, ed.. The New 
Military . New York: Russell Sage Foundation. 

Kanter, R. 

1977 Men and Women of the Corporation . New York: Basic Books. 
Kessler, R. C. 

1979 Stress, social status, and psychological distress. Journal 
of Health and Social Behavio r 20:259-72. 

1985 Dyadic Responses to Stress: A Gtuc^ of Married Coxsples. 
unpublished manuscript. 

Ktessler, R. C. and McRae, J. A. Jr. 

1981 Trends in the relationship between sex and psychological 
distress : 1957-197 6 . American Sociological Review 
46:443-452. 

Lipset, S. M., Trow, M. A., Coleman, J. S. 

1956 Union Democracy . New York: The Free Press. 

March, J. G., Simon, Herbert, A. 

1958 Orcfanizations . New York: John Wiley. 

Pogue, W. R. 

1985 Hew Do You Go to the Bathroom in Space ? New York: Tom 
Ddherty Associates. 

Radloff, L. 5., Rae, D. S. 

1981 Conponents of the sex difference in depression. Pp. 77-110 
in Roberta G. Simmons, ed. , Research in Community and Mental 
Health . Greenwich, CT: JAI PrtoS. 



4:6 



401 



Siegel, Dubrovsky, V,, Kie^ler, S., and McGuire, T, W. 
1986 Groap processes in cctttputer-inadiated cxaranunication. 

Ortranizational Behavior and Human Perfonnance 37:157-187. 

Yaia:\gishi, T, 

1986 Limits of generalization of small groi:qp social dilemma 
e5^)erimeiits. Pp. 1-17 in American Sociological 
Association. New York. 



407 



SYNOPSIS OF GENERAL AUDIENCE DISCUSSION 



Dae to tinva limitaticsns only a brief discussion of the papers in this 
session was possible, main ccraments on these papers were made, as 
follows: 

!• It was pointed out that neither of the papers considered the 
relat-^onship between the airborne or space station crew and the 
larger OOTircamity that participates in the operation of the 
station. Ihe role of mission control^ for exairple, was not 
mentioned and merits careful examination, The aiibome crew 
does nob. exist in isolation and reflects the objectives of the 
larger organization and of the nation (or nations) as a \diole. 
Mission owtrol is in constant corainunication contact with the 
airborne crew and serves irrportant functions with regard to its 
safe, effective, and efficient operation. 

2. It was suggested that the extant literature on social system 
behavior in a nuniber of other anaiog-oiis "hostile" environments 
such as undersea or in Antarctica be reviewed carefully for 
information that mi^t be relevant to the situation of 
long-duration space missions c 
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THE ROIES OF HUMANS AND MACHINES IN SPACE 
David L. Akin 



iNTRonucnoN 



^hrou^out the history of the space program, there has been a didhotomy 
of opinions on the relative inportance of manned and unmanned (i.e. , 
robotic) applications. Until the arrival of the shutt3e, manned and 
unmanned operations occupied different sections of NASA Headqua2±ers, 
involved different groups of NASA field centers, and were generally 
viewed as carpeting for the limited funds available. Ihere were (and 
still are) areas, such as planetary e55)loration, vdiere there were no 
viable qptions to the use of unmanned systems. The arguments, rather, 
tended to the utility of humans in space, and the cost of replacing 
each of their functions with robotic alternatives. 

Any self-contained device performing a useful function in space, 
whether a human or a robot, Ttiust contain the same set of basic 
functions to adequately perform the mission. In many cases, of course, 
the mission is actually constrained to work around the limitation of 
the state-of-the--art in one or more of these areas. These basic 
functions for autonony include: 

Sensation In order to operate on the local environment, a system 
requixes sensors for detecting c±>jects. These typically 
break down into reiftote sensors (such as vision or othei 
ranging systems) and proxmal (such as tactile and force 
sensors) . 

Coaiputation having the capability to detect objects does not 

translate directly into ^Jie capability for manipulation . 
Understanding the spatial relationships, having a 
kncwledge base of both general activities (tools, forces 
and motions) as well as specific knowledge (specific 
satellite design details) are necessary for effecting a 
coiplete system. 

Manipulation This area has trailed the others considerably, as many of 
the original space objectives did not involve 
manipulative activities. Manipulation to date has been 
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performed by the sairpling arms of the Surveyor and VDcing 
landing spacecraft in small scale, and by the Remote 
Manipulator System of the shuttle in larger scale. None 
of these systems has involved any appreciable dexterity 
in either the arms or the end effectors. Nonetheless, 
this area is pivotal for future space activities, as it 
relates to the capability of the spacecraft system to 
interact with, and to alter, its local environment. 



Locomotion ihis is a necessary function, often relegated to a 



si:53porting role. Ihe capability to maneuver around in 
space, either on an existing structure or in free space,, 
is rajuired for any robotic system to be generally 
useful. It might be anticipated that space systatis will 
evolve a wider range of locomotive capabilities than 
humans have evolved in a gravity field. For example, 
legs on a human provide both locomotion and anchoring 
functions. In the microgravity environment of space, 
locomotion mi^t well be relegatai to the equivalent of 
arms, vdiich have the finer dexterity and force control 
required in the absence of danping, and anchoring left to 
sets of specialized manipulators with strength, but 
little other capability. Ihrusters for free-fli^^t 
propulsion will also be common, at least for those 
situations not constrained to minimize use of 
consumables. 



It is interesting to examine a known autonomous system (a human) in 
the context of these functions. The head is the sensor platform, 
located in the optimal location for bipedal locomotion. The 
ccdtpitational ^''stem (brain) is co-located with the sensors in the 
head, to minimize the length (and vulnerability) of the hi<^-bandwidth 
data paths, particularly vision. The arms form a dexterous 
manipulative system, and the legs similarly perform locomotion tasks. 
HhB torso thus enconpasses most of the si^jport functions, as well as 
tying all of the other systems together in a self-contained unit. The 
human body is thus a wonderful exairple of a possible design for a 
robot. However, the human paradigm should not be extended too far, as 
many of the optimal choices for a system which stands erect in a 
gravity field may have little logical application in a system optimized 
for wei^tlessness. 

The task, therefore, is to come to an understanding of the past and 
present roles of humans and machines in space activities, and 
extrapolate to the future to come to a meaningful understanding of the 
capabilities and limitations of each. In fact, it is worth eirphasizing 
at this point an essential conclusion of this paper: it is not an 
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This category includes all the other functions necessary 
for the system to exist. This would include power, 
cooling, structural integration, navigation, and 
communications . 
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"either-or" choice between humans and machines. There are necessary 
and sufficient roles for both in the foreseeable future in space. 



mSIQRICAL FEBSPECITDJES FBSM SPACE FKEQir 

W-cth the limted payload capability of early launch systems, there was 
no viable alternative to the use of unmanned satellites. Ihese early 
payloads \vere coicposed of sensor packages, coaranunications gear, and 
si^jport systems, and were required to do nothing more than 
observe/measure and report their findj.ngs. Even today, many of the 
satellites being launched to orbit are still limited to these 
functions; for the purposes of this paper, these systems may be 
considered to be subrdbotic systems. 

It seems clear that the original intention of the Mercury prograin 
was to use the humans as an e>qperimental subject, in order to stuc^ the 
effects of spacefli^t on humans^ The choice of e:5)erienced military 
test pilots for Mercury astronauts led to somae predictable 
dissatisfaction with this role, and the desire for incorporation of 
manual control capability in the vehicle. Ihis led to the use of the 
hman as a controller, albeit primarily in the badki?) mode. A case in 
point was the Mercury attitude control system. Ihe primary system was 
an autcQ[tatic one, vMch maintained the capsule in retrofire attitude 
during orbital operations. A second selection was "fly-by-wire", in 
vAiidi the astronaut could command attitude maneuvers by \ise of a 
side-stick controller, vM^a would then be performed by the attitude 
control qrstem. The final mode, however, was purely manual, as the 
astronaut actuated push-pull rods vMch mechanically opened and closed 
thruster valves. 

Ihis issue of humans as the final back-i:?) is a pivotal one. For 
exaitple. Mercury was a siitple spacecraft, designed primarily for a 
single, sequentially organized mission. It carried no on-board 
conpiter, but instead relied on activating systems at set times on a 
mission clock. Contingencies, such as the decision to enter without 
jettisoning the retropack on John Glenn's orbital mission, relied on 
manual activation of retrofire coaranands to prevent the sequencer from 
automatically separating the retropack following retrofire. Thus, 
throu^out the Mercury program, the human represented the adaptable 
(reconfigurable) element of the Mercury control system. 

Ihe Gemini program was an interesting "backwater" of space f li^t 
develcpnent. Originally conceived as a Mark II version of the Merxiaary 
capsule, Gemini was developed as an interim program to increase space 
f li^t experience vMle waiting for the development of the i^llo 
system. Since it represented to some an evolutionary dead-end in 
manned space fli^t, the manned elements were permitted to have unusual 
sway in the systems development. Thus, vAiere Mercury was largely 
automatic, Gemini was almost entirely manual. It mi^t indeed be 
argued that, more so than any other space program before or since 
(inclining Shuttle) , Gemini wa:: a pilot's spacecraft. There were no 
automatic abort modes: the crew had to decide the appropriate action 
based on the reports of the instruments. For the first time, a space 



ERIC 



4.12 



408 



vehicle cculd be accurately described as a spacecraft, since Gemini had 
the capability to change orbits and achieve rendezvous. The crew had 
windows vMdh faced forward, and hatches vMch could be opened and 
closed again in fli^t. Even in landing, the vehicle was positioned to 
allow the crew to sit v^jri^t, and much developnent effort took place 
towards a Eogallo-wing recovery system vMdh would have allowed Gemini 
to maneuver to a landing on the dry lake bed at Edwards Air Force Base. 

Even in the midst of this manual spacecraft, additional elements of 
autcatation had to be incorporated. Ihe Gemini was the first spacecraft 
to fly with an on-board cattpiter, used for calculating rendezvous 
maneuvers and for control of the lifting reentry. Althou^ many of the 
procedures used for rendezvous and docking were manual in nature, the 
carrplexities of orbital mechanics required the use of ground or 
on-board ccargputer calculations; the crew were primarily used as 
interpreters of visual and radar data. 

The presence of humans on board Apollo may be considered as entirely 
a political decision, as the entire objective of the Apollo program was 
to place a man on the moon and safely return him to earth. The greater 
coirplexities of thp spacecraft aid mission led to a return to automated 
systems, after the largely manual nature of the Gemini spacecraft. 
"Ilius, for exanple, many of the abort modes were automatically 
initiated, althou^ the crew did agitate for manual control of launch 
vehicle trajectory as a bada^ for the Saturn fli^t control system. 
The manual docking techniques developed during Gemini were utilized by 
l^llo in lunar orbit. 

i^llo again shewed the utility of humans as a robust backup 
system. It was not possible to do a survey of landing sites down to 
the level of all possible hazards to the lunar Module; it was therefore 
planned that the pilot would take over and steer the lunar lander to a 
safe landing site. This system worked well in every instance: the 
initial aim point for i^llo 11, for example, turned out to be ri^t in 
the middle of a boulder field. Manual control of the landing vehicle 
allcvred the targeting of landings next to an unmanned Si;irveyor 
spacecraft, adjacent to a deep lunar rille, and in the lunar 
hi^ands. aiiis greatly augmented the data return, as later flights 
were targeted into areas of greater geological interest, with fewer 
options for safe landing sites. 

Uie presence of humans to pilot the landers into safe locations may 
be ccsrpared to the Viking landings on Mars a few years later: since 
the unmanned vehicles did not have the image processing and decision 
making capabilities of hvimans, both of the landing craft had to be 
targeted to the flattest, smoothest, and therefore least interesting 
landing sites available. Similarly, the Soviet Union performed lunar 
e3q)loration with unmanned vehicles. However, the quantity of saitples 
returned differed from Apollo by 3-4 orders of magnitude; since the 
sairples were selected randomly from the immediate location of the 
landing vehicle, it may be assuned that the quality of sairples varied 
widely form i^llo as well. 

Skylab, as the first American space station, involved the long-term 
habitation of space by humans. Indeed, one of the major objectives of 
S]ylab was to study the effects of long-term space fli^t on human 
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physiology; however, to use tMs objective as a justification for 
manned space fli^t constitutes circular logic. Much inore may instead 
be said of the other science objectives of Skylab, such as earth 
r^asources, solar physics, and space operations. In all of these, the 
Sl^lab crews played 2r> essential role in the success of the mission. 

Since Skyiab was const^^^cted of surplus i^llo conponents, there was 
little significant difference between the two programs in the 
automation levels of the veliicle system themselves. Ihe only 
significant difference was in the eQ)eriment packages, vdiich in Skyiab 
r^resented a later generation of technology from the spacecraft 
hardware. For exairole, the solar observing instruinents in the i^llo 
Itelescqpe Mount could be (and were) operated reinotely from the ground. 
However, the oriboard crewmen could provide more immediate decisions 
vSien faced with fast-breaking phenomena, and in fact managed to record 
solar flares from their inception. Ifodifications to the onboard 
control panel of these instruments during the course of the Skyiab 
mission were primarily to increase the ability of the crew to make 
imroe-ii^te data records for use onboard, by the addition of an 
instant-print scope canera. 

Of greatest significance, perhaps, was the role played by the crew 
in the repair of the workshop and salvation of the mission. Extensive 
extravehicular activities (EVAs) were performed to free the jammed 
solar array, and to deploy a sunshade to reduce tenperatures in the 
workshop to habitable levels. The three Skyiab crews regularly 
repaired failed equipment, both inside and outside of the space 
station, and clearly made possible the success of the program: had 
Skyiab been an unmanned station with the state-of ^e-art robotics of 
its time, it clearly would have had little or no recourse beyond those 
capabilities left by the launch accident. 

Ihe greater ccarplexity of the Space Shuttle has led to the greatest 
amount of automation yet. Fli^t crews have referred to the Qrbiter as 
the "electric airplane", since almost all functions are controlled 
throu^ the four general-purpose coirpiters (CPCs) . The atmospheric 
fli^t characteristics of the Qrbiter are such as to be practically 
xanflyable without stability augmentation. Althou^ a manual direct 
mode does exist, fet' of the fli^t crew have much success in this mode 
in training simulations, and even this mode relies on the GPCs to 
interpret hand controller data and command motions of the fli^t 
control surfaces. Althou^ the fli^t control system is capable of 
flying the vehicle all the way throu^ landing ("autoland") , it is 
interesting to note that no crew has yet allowed this to be tested on 
their mission: the comraander always takes over in control stick 
steering mode (i.e., stability augmented) at subsonic transition, or 
certainly by the pre-flare maneuver at 2000 feet altitude. This is 
representative of many of the lessons learned fjxm shuttle operations: 
the fli^t crew have now been cast in the role of systems managers, but 
still demand active involvement in all safety-critical aspects of the 
mission. It would be unwise to assume that this trend will not 
continue into the era of the space station. 
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CAPABILTTIES AND UMITAnONS 

It has been said that humans are the only self-prograinndng, hi^y 
dexterous autonomous devices capable of being mass-produced by 
unskilled labor. Be that as it may, there are significant limitations 
on both hmans and machines in the space environment. Having evolved 
in the environment of the earth's surface, it is necessary to (in some 
degree) take the conditions of earth along with humans in space. 
C3onstraints to be considered include atmosphere, consumables, volume, 
work cycles, and gravity. 

_ aimans need oxygen above a partial pressure of approximately 3 psi 
in order to survive. Ihrou^ the J^llo program, spacecraft were 
sillied with a pure oxygen atmosphere at 4 psi. This siirplified 
several operational problems: the structures could be simpler, as the 
internal pressures were less; only a single gas had to be stored and 
delivered; and there was no requirement for denitrogenification prior 
to an extravehicular activity. However, the Apollo l fire showed 
graphically the primary disadvantage of a single-gas system. 

^^f^^^b, the atmosphere was kept as 5 psi, with nitrogen forming 
tte additional partial pressure beyond that required for oxygen. While 
this reduced the flame propagation problem, the crew was less than 
satisfied with the atmosphere, as it was difficult to carry on 
conversations beyond their immediate vicinity. CXarent plans for the 
Space Station assume a sea-level pressure of 14.7 psi, as used on the 
Qrbiter. Ihis decision is coi^jled into the choice of avionics: the 
sea-level pressure of the Qrbiter was partially chosen to allow the use 
of ''off-the-shelf" air-<x)oled avionics. Ihis had an effect on 
habitability, as the number of cooling fans on the Orbiter creates an 
appreciable amount of noise, thus limting conversations to the 
immediate vicinity of the individuals. The Orbiter has been operated 
©ctensively at 10.2 psi during pre-breathe cycles prior to an EVA, but 
this requires a significant power-down of avionics to prevent 
overheating. 

A biological organism, such as a human, is powered by a series of 
chemcal reactions, and must be replenished regularly. a totally 
qpen-locp system (that is, no attaipt at recycling anything) , humans 
will require approximately 5 kg/day of food, water, and oxygen. 
Recycling water and air will reduce this to l kg/person-day: thiti is 
equivalent to 540 kg of consumables for a six-person crew over a 90 day 
resirpply cycle. Even without recycling, then, consumables are not a 
pacing item for a space station if the crew sizes are kept small. 
Ihese figures also do not take into account such operational factors as 
air loss, inefficiencies in recycling, or food carried for reasons 
beyond base-level nutrition, and therefore the actual figures planned 
for consumables in space stations will be hi^ier than these academic 
mimiraims. Many of the techniques for effective recycling are currently 
hi^y ej^imental, and will require a great deal of develcranent prior 
to operational lase. 

Studies have shown a direct relationship between habitable vol\mie 
and crew performance; the minimum volume is also a function of mission 
duration. In addition to the working volvmre, humans need to have 
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shared facilities for eating, exercisir^, and personal hygene, and are 
xasually best provided with some private locations for recreation and 
sle^. Deciding on these issues are sane of the most difficult choices 
in interior station design, as there is often no clear relationship 
between procJuctivity and volvime; indeed, there is often no generally 
agreed-vpon inetric for productivily itself. Other desirable 
modifications to a spacecraft designed for long-term human occv^ancy 
ijKaiJde winJows (as many and as large as the structural designers can 
be forced to incorporate) , airlocks, and redundant escape paths in case 
of contingencies such as hiill penetration or fire. 

Humans are iKJt capable of working "around the clock": some amount 
of recreation is reqiiired, along with natural housekeeping and other 
si^jport functions and a sufficient amount of sleep. A normal 40 hour 
week represents a 24% duty cycle for a human. Assuming five hours per 
day for meals, housekeeping, and excercise represents a further 21% of 
the time, leaving 55% of the day for sleep, recreation, and general 
off-duty activities. 15ns may be conpared to the averages for Slqrlab: 
25.6% ejqjeriment operation (work), 33.9% meals, housekeeping, and 
exercise, and 40.5% for sle^, rest, and other. It is interesting that 
the net percentage of time spent on experiments is so close to that of 
a typical 40 hour week; the exhaustive pace reported by the Sl^lab 
crews clearly demonstrates the increased overhead associated with 
living in space. Evidence indicates that the work pace established in 
SJ^lab would be difficult to maintain over indefinite periods on a 
space station: therefore, planners must either accept lower than normal 
duty cycles on eq)eriments and other output-oriented activities, or 
plan ways of automating the housekeeping functions to bring these back 
in line (frcm a perspective of time) with conparable activities 
associated with living on earth. 

One of the origins of the increased houseketping times is the 
necessity of adapting to routine living in the /ei^tless environment. 
Althou^ it can certainly be maintained that ir sufficient experience 
has yet been obtained to provide definitive conclusions in this area, 
clearly it will be difficult to overcame the millions of years of 
evolution in a gravity field in a brief time, and some performance 
degradation in weightlessness is to be expected in the foreseeable 
future. Riysiological reactions to extended microgravity ijiclude a 
number of hormonal and fluid shifts: the only long-term effect viiicOi 
seems to be both serious and progressively degenerative is a 
decalcification of bone material. This effect can be retarded to some 
degree by strenuous exercise, particularly involving compression of the 
large bones of the leg: this has led to the development of treadiaills 
with elastic cords replacing some of the force of gravity, allowing 
aerobic running exercises. 

Some effort has gone into examining the options for providing 
appreciable gravity on a space station, by rotating the corponents to 
provide a centripetal acceleration. This effect can be quantified as 
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^ere w is the angular velocity, and g is the effective acceleration at 
a radius of r. Early plans (prior to S]<ylab) indicated that an angular 
velocity of 4 rpra would be acceptable, producing a required radius of 
55.8 in for earth-normal gravity. Some research has suggested that 3 
rpm (99.3 m) mi^t be a better rotational velocity for human 
adaptation, even with a select crew population, if selection standards 
arerelaxed to most of the general population, that implies a rotation 
speed of I rpm, with a resultant radius of 894 m required. 

Obviously, it would be extremely complex and e^^jensive to provide 
stations of this size. One method of easing this requirement would be 
to provide partial gravity: an early space station proposed with a 
radius of 25 m at a spin rate of 4 rpm would have produced an apparent 
gravity of .45 g. However, nothing is known of the effects of partial 
^vity on bone decalcification or other microgravity effects; this is 
clearly an important research issue to be addressed by a space 
station. Short of this information, the logical approach is probably 
tiiat hevng considered: do not provide artificial gravity, and rotate 
the crews at intervals known to be safe, such as three months. 

It would be unwise, however, to overly eri-phasize the limitations of 
humans, without scane equal attention to their assets. Ihe capabilities 
of humans have been demonstrated repeatedly throu^out the historv of 
m^ined space fli^t. The list of ejqjeriments repaired, satellites 
retrieved, and missions saved would be too long to go into in this 
paper. Of greater importance than reviewing the individual 
performances is to summarize the individual capabilities which made 
them possible. 

Manual dexterity is obviously hi^y critical for those tasks 
requiring physical manipulations. No manipulator has yet been 
developed with anything remotely approaching the dexterity of the human 
hand. Some ej^imental efforts in this direction (the Utah/MIT hand 
and the Salisbury hand) have produced impressive manipulator arm at the 
caorrent time. Bie approach taken in the nuclear and the undersea 
cxmnoB^ (the other two areas for application of general-purpose 
rc^cs) have tended towards the use of simple and effectors, and the 
alteration of tasks to allow for limited dexterity. To some extent, 
the same is true of space systems designed for EVA involvement: 
cairrent pressure suit gloves are still far more dexterous than 
^pulator and effectors, and are likely to continue to evolve in the 
future. 

_ Strength is (perhaps surprisingly) still an important issue in 
microgravity. The Remote Manipulator System of the Orbiter is capable 
of manipulating payloads iqp to the Orbiter limit of 65,000 lbs., but is 
severely strength-limited, and therefore handling time goes up as mass 
goes down. The most capable system for retrieval has been shown to be 
an m astronaut in the Manipulator Foot Restraints, attached to an RMB 
J?- „i^^J°^ locked. This configuration was used for grappling the 
two HS-376 satellites retrieved on shuttle mission SIS 51-A, as well as 
the Ifiasat HS-393 satellite captured, repaired, and re-released on SIS 
Jr^® ^ procedure especially, with the requirement to despin 
and capture, and later respin and deploy a massive satellite, could not 
have been effected without the strength and dexterity of a human. 
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Ihis raises an interesting side point: in most robotic systeins 
available today, manipulators are specialized for either strength of 
dexterity, but not both. Those arms used for positioning large masses 
generally do not have the positioning accuracy of arms used for exact 
pointing or positioning tasks with li^twei^t payloads. To some^ 
extent, the microgravilY environment of space may tend to help this 
prx>blem, as no appreciable strength of the arm will go to maintaining 
its position in the absence of external forces. At the same time, mass 
limitations tend to produce li^twei^t space manipulator designs, 
requiring either tasks adapted to their flexibility, or sophisticated 
conpensatory control systems to actively reduce the structural modes. 

In general, humans are excellent adaptive control systems. Humans 
routinely change gains and algorithms based on the physical parameters 
of the system being controlled, and are capable of adapting and 
changing to a continuously varying system, within limits. Humans 
inprwe with practice, and can transfer learned responses to new 
control tasks of a similar nature. 

Humans are especially suited for rapid processing and integration of 
visual data. From the first manned orbital flints, crews have 
reported being able to see features on the grouivd indistinguishable 
from the best photographic records. Nuances of co],or, shading, and 
pattern may be instantly apparent to a human, yet be^ below the 
resolution of an electronic imaging^ system. Humans have the capability 
to receive and derive ^cial information fraa both static and dynamic 
scenes, and continuously update their world model based on visual data. 

The hximan capaciiy for judgement is certainly well-discussed, but it 
mi^t be maintained that there is a greater utility for low-level 
reasoning than for intellectual decision-making capability. For 
example, neutral buoyancy tests of EVA show a hviman capacity for 
instinctive maneuvering in the simulated wei^tJ.ess environment, 
resulting in inprovement in task performance without the need for 
restiraints, and without conscious considera1J.on of body actions. This 
sort of maneuvering, which is coirputationally conplex for a robot, can 
be performed by a hman in "background" mode while concentrating on 
tagk planning. While e^^jert system shells will be important for error 
diagnosis and stratiegic planning, it is the robotic equivalent of 
reflexes, instincts, and caramon sense vMch will provide the greatest 
challenge for the artificial intelligence caramunity. 



lUIURE RESEARCH NEEDS 
Quantitization 

Maiy of the iitp:)rtant decisions on the applications of himans and 
machines in space have been (and are currently being) based on 
prejudices from limited prior e^q^erience, a priori arguments, and 
large, costay sys1:em analyses \fMch have no meaningful underlying data 
base. Certainly, the path of folla:>ring past e>5)erience will probably 
result in an operable space station. However, much could and should be 
done to formulate and follow a logical plan for ground-based analyses 
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and simlations, and fli^t e^^jeriments, v^ch would produce a 
neanii^ data base on human and machine capabilities and limitations 
on each of the operational categories needed for a successful space 
station program, ihere are two caveats for sudi a program; first, of 
course, the research must be performed. But equally iiiportant, the 
program managers must be willing to listen and act on the outcomes of 
the resGLxcti, and not revert to "tried and true" solutions for the sake 
of engineering conservatism. 



Appropriate Roles 



One of the outgrowths of the data base development described above 
would be a great^ quantitative understanding of the ajpropriate roles 
of hum^ and mactoes in space operations, and the mc^ favorable 
filiations of each to accomplish any particular task. This may imply 
S: nlS^rn^ traditional roles. ^ For exaitple, as discussed eaJlS, 
the fli^t crew has insisted on maintaining an active, controlling role 

critical to safety of fli^t, or of irdision suc^. 
^wever the (^rqpriate) risk adversity of mission planners prohibits 
^ibntive soliAions to any problem which can be f orsseen prior to 

^^.*?-S?^ plethora of checklists v^ch describe the 
appropriate actions of both the fli^t crew and the ground controllS 

"^^^ ^ this algSSntdSlSrSh 

dmates the need fc^most of those capabilities cunriitly ^quf to 
huraans, such as insist and judgement. Shouldn't this argue for 
autcanated systems to implement corrective action in the event of 
critical malfunctions? 

In respOTse to this question, an interesting parallel may be drawn 
frcm current findings in aeronautical human factors, with the 
Jic^ased autonomy of transport fli^t control systems, the airline 
tiight crew are assuming to greater extents than ever the role of 
system managers. Fli^t control systems have become capable of 
oonpletely controlling the aircraft from liftoff throu^louchdown and 
rollout. However, serious accidents have already occurred in airlLne 
s^ice, due to a fli^t crew vihidi is neither fully aware of the 
^S^if S;5 °f ^,?i^t ^'"trol system, nor hi^y practiced in 
S?^i^^v°^ S^^- ^ that,'^short of removing 

toefli^t deck crew and automatia>g airliners, too mudi automation 

nSSifS^? i^^"^ ^ inattentiveness in the codq^it; the same will 
probably be found uti space fli^t. 

i=„i?!f,^"2riS''4.? argument is to show that it is not enou^ to 
fully understand the limitations and capabilities of eadi of the 
^SS^ S^^?'^ the interactions of the pieces may be far mor^ 
inp^tant to safety and mission success than the pieces themselves. 
S^S'^^ mmtoer of interactions is a cotitoinatorial problem, 
to postulate a rigorous or analytical solution to this 

£?i^i;rv^?Lf it must be approached in a logical 

and methodical way if programs as complex as space station are to be 
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Iitpraved Metrics 

A prcblem vjhich is at once conceptually siirple and, in ioppleTentation, 
difficult is that of appropriate metrics for hunan and itachine 
performance in space. Perforxnance indices based on task performance 
tend to be unique, or specialized to a small subset of tasks. Indices 
based on laore generic factors, such as motions or subtasks, must take 
into account the fact that humans and machines may be able to perform 
the same tasks, but will likely iise different techniques in 
accoitplishing them. Even among limited communities, such as EVA, there 
has yet to form ai^ consensus on the appropriate measurements to^ 
prxDduce meaningful coaiparisons beto/een tasks or e3q)eriments. This will 
be true in larger measure as the field expands to include a wider range 
of human and robotic activities. 



An Assessment of Anthrqpocentrism 

AlBOst all of the designs currently proposed for telerobotic systems 
are hi^y anthrqpocentric: that is, they tend towards a robotic 
diqplication of the human form. Artist's concepts show a head (sensor 
platform) , with two arms mounted on a torso, and with one or two "legs" 
vised for grappling. This approach is understandable for a system vMch 
is designed to incorporate (or at least allow) teleoperation, but its 
assuitption for. a fully robotic system can only be attributed to 
engineering conservatism ("stick with a known configuration") . bome 
recent results frcM siimilation indicate that a number of manipulators 
with limited degrees of freedom, designed to perform limited or 
dedicated tasks, may offer performance increased over two 
anthrqporaorpihic general-purpose manipulators. The h\mm form, evolved 
in a gravity field for effective protection from predators, is not 
necessarily the best adaptation for space activities, and alternate 
forms and technologies should be encouraged and studied carefully. 



CONCmSION 
THE (FAR?) lUIURE 

Given sufficient time, si^jport, and determination, human beings have 
demonstrated that they are capable of doing almost any physical or 
intellectual task. They have shown over the last quarter-century that 
they are fully capable of living and working in space, performing a 
wide variety of tasks, from the routine and mundane to innovative, 
immediate actions needed to save a mission or a life. One may 
postulate a new imit of measurement: the "human-equivalent", or a 
system in space with the same effectiveness as a single human. Such a 
system mi^t be composed of a full-time human, living and working in 
space; of a human in space working part-time with a rdx>tic system; of 
a teleqperated system controlled by a human on the ground; or even of a 
fully autonomous robot with learning and reasoning capabilities. 
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It IS clear that the "human-equivalent" presence in space is on a 
monotonically-increasing curve. As the societies on earth start to 
gain advantages from space, the need for capabilities in space will 
continue to grew. This iiiplies a parallel growth in the r^uir^t to 
operate routinely in space. «=si^«i<eiii- to 

As a tiiou^t e^qjeriment, let us pick that point in the future at 
which nachine systems have became as capable as a human. It mav even 
be maintained that thi point is not in the far distant future- 
mampulative capabilities ar^ already approaching that of a huiian in a 
Pf^^?^^' ^ aecisions on-orbit have been constricted to 

algoritiimic logic trees easily inpleraented on modem conputers. it is 
Cx,jar that, at some point in time, machines will be capable of 
performing everything currently done by humans in space. At that 
point, will we (as a nation, or a civilization) pull all the peoole out 
of space, and rely totally on robotic systems to continue the 
ejqjloration and ej^jloitation of this last, infinite frontier' 

At this philosqphical question, the author has reached the lijuits of 
his original charter. History indicates that humans are capable of 
perlorming iitportant, complex tasks in the space environmentT As 
adaptive mechanisms, humans have only begun to learn how to operate in 
this new environment. i-^«>^ jji 

Howaver, much of manned space fli^t to date has been involved with 
limitations of biological organisms. Ttie evolution of 
robotic systons has been orders of magnitude more rapid than that of 
biological systems; there is no reason to assume that this new 
evolution will step short of full human capacities, particularly if 
measured against the currently limited capabilities of humans in 

SJ?;^ ^ ^^^^^ strengths and weaknesses; 

mt the best mi^fture of each is a time-dependent solution; and that, 
f^ the foreseeable future, the presence of each in space is^ ' 
absolute necessity for the effective use of the other. If continued 
devel^ment of robotic systems renders humans in space obsolete, that 
must be a rational, conscious decision made by society as a whole 
based on factors beyond those appropriate to an ei^ineering overview 



BIBHtOGRAFHY 

Atkinson, J. d. , Jr. , and Shafritz, J. M. 

1985 Ttie Real stuff: A History of NASA's Astronaut 

Recruitment Pnsgram. Praeaer Scientific . 

Bilstein, R. E. 

.Stages to Satur n; A Technological Hi.crf-o rv of the Anolln/g^-hiv^ 

■launch Vehicles. National Aeronautics and Space 

Administration. NASA SP-4206 



ERIC 



417 



Brooiks, C. G,, Grimwood, J. M. , and Swenson, L* S., Jr, 

1979 Chariots for Apollo: A History of Mann ed lunar 

Spacecraft , National Aeronautics and Space 
Administration, NASA SP-4205, 

Collins, M, 

1974 Carr ying the Fire , Ballantine Books, 

Ccstpton, W, D, , and Benson, C, D, 

1983 Living and Working in Space: A History of S}o/lab, 

National Aeronautics and Space Administration, NASA 
SP-4208, 

Oonners, M, M, , Harrison, A, A, , and Akins, F, R, 

1985 Living Aloft; Human Recaiirements for Extended 

Spaceflicflit , National Aeronautics and Space 
Administration, NASA SP-483, 

Fumess, T, 

1983 Manned Spaceflight Log , Van Nostrarxi Bexrihold Co,, Inc, 

Hacker B, C, , and Grimwood J, M* 

1977 On the Shoulders of Titans; A History of Project 

Gemini , National Aeronautics and Space Administration. 
NASA SP-4203, 

National Acadeiry of Sciences National Research Council 

1972 Human Factors in Long-Euration Space Flight , Space 

Science Board, 

National Aeronautics and Space Administration 

1969 Proceedings of the Winter Study on Use s of Manned Space 

Flight , NASA Science and Technology Advisory Committee 
for Manned Space Fli^t, NASA SP-196, 

Pitts, J, A, 

1985 The Human Factor: Biomedicine in the Manned Space 

Prxxrram to 1980 , National Aeronautics and Space 
Administration, NASA SP-4213. 

Smith, D, B, S,, ed, 

1976 A Systems Design for a Prototype Space Colony, 

Department of Aeronautics and Astronautics, Massachusetts 
Institute of Technology, 

Swenson, L, S,, Jr, , Griinwood, J, M,, and Alexander,. C. C, 

1966 This Nev; Ocean: A History of Pronect Mercury > National 

Aeronautics and Space Administration, NASA SP-4210. 



4.22 



SHARING OXNinVE TASKS BBIWEEN PEOPLE AND OCMPUIERS IN SPACE SYSTEMS 

Willicffli H. StarfDUck 



WHAT ARE THE RELATIVE ADVANTAGES OF PEOPLE AND OCMPUTERS? 

Mankind's capabilities change very slowly, whereas cotipiters' 
capabilities have been fast-changing. Ihe cost of a memory ccsiponent 
has dropped forty percent per annum for over thirty years, and memory 
sizes have grown even more rapidly than that (Albus, 1981; Toons and 
Gqpta, 1982) . Ocarputation speeds have been accelerating nearly 25 
percent yearly, the cost of logic hardware has been dropping equally 
rapidly, and the ccarputation work done with each unit of anergy has 
been rising thirty percent per annum. Ocnputing hardware has beccsne 
much more reliable and very much smaller. User interfaces and 
programming languages ha»/e inproved considerably, especially over the 
last decade, if human beijigs had evolved as rapidly as computers sij>ce 
the mid 1950s, the best runners would now finish a 26-mile marathon in 
2.3 seconds, a bri^t student would ocsnplete all schooling frcsn 
kindergarten throu^ a Hi.D. in a bit over two days, normal eaters 
would consume one calorie per month, and half of America's families 
would be earning more than $141,000,000 annually. 

Ihe Improvements in ocjtpiting costs, sizes, and speeds have 
generally exceeded the most optimistic forecasts of yesteryear, as has 
the proliferation of ooirputers. Uhfulfilled, ho'^«='/ar, have been the 
forecasts predicting that computers would shortly be able to imitate 
iwman beings. For exanple, in 1960 Sinon optimistically speculated 
that ''IXrolicating the problem-solving and infomation-handlirg 
capabilities of the brain is not far off; it would be surprising if it 
were not acccanplished within the next decade" (Sinon, 1960:32) . 

Ccsnputers have not, in fact, developed an ability to reason very 
much like people, and conputer simulation of human thou^t has had 
little success (Albus, 1981) . When computers look most effective 
solving problems, the ccsnputers use quite different techniques than 
people apply (Weizenbaum, 1965; Winograd and Flores, 1986) . For 
example, Newell et al. (1957) studied students' efforts to prove 
theorems in mathematical logic, and inferred that the students search 
for proofs, using heuristics that generally lead toward proofs but do 
not guarantee them. Challenged by such work, Warg (1963) devised a 
coiputer program that efficienUy proved all 200 theorems in the fixst 
five chapters of Principia Mathematica . Job-shop scheduling affords 
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another exanple: Scientific-manageinent studies of human production 
schedulers led to the developanent of Gantt charts to portray 
graphically the activities of various machines, and thus to help human 
schedulers visualize the cascading iirplications of alternative 
assignments, CJcsiputers generate job-shop schedules by solving 
integer-prograinming problems that no human could solve correctly 
without inachine assistance* 

HhB differences between people and ccanoputers have an illusory 
quality, insofar as people tend to talce prevalent human abilities for 
granted and to notice rare or iiiiuman abilities. If coatpiters did 
operate exactly like people do— working at the same speeds, making the 
same mistakes, showing the same fatigue, ccffrplaining about xitpleasant 
tasks, and so on~pecple would regard ccnpiters itverely as inhuman 
labor, Ocsipiters most iirpress people v*ien they augment human abilities 
significantly—by working silently and tirelessly, by calculating with 
dazzling speed, or by displaying total consistency. 

But the (juite real differt.jces between peqple and conputers are 
persistent and profound. Rather than ragard cortputers as potential 
imitators of human beings, it makes better sense to look upon them as a 
disti3ict species — a species that prefers different languages, reasons 
with soroevAiat different logic, finds ccanfort in different habitats, ard 
consumes different foods, 

Ocffiputers are much better symbol manipulators and much stricter 
logicians than peqple; and ccjtputers are much more decisive, literal, 
precise, d^edient, reliable, consistent, and transparent, Q^rrputers 
can act both much nore quickly and much more slcwly than people. If so 
instructed, ccaiputers will carry out utterly absurd instructions or 
they will remain ccorrpletely calm in the face of inpending disaster, 
Ccsiputers ec^^ily simulate what-if conditions; and they can extrapolate 
even the most farfetched inplications of theories or conjectures. 

People, on the other hand, possess brains that are so much more 
ccnplex than the largest ccoiputers that conparicons make no sense. 
These brains carry on numerous .simultaneous and interacting processes, 
soane of v^ch operate entirely automatically. Without even trying, 
pecple process visual ard % jditory data of great conplexity. Peqple 
can shift levels of abstraction from detail to generality and back, 
they separate foreground images from background images, they 
distinguish patterns vMle remaining aware of contexts, and they attend 
to inportant or unusual stimuli vMle ignoring unimportant or routine 
stimuli, Peqple have quite extensive memories that posses^ meaningful 
structures; and if they have relevant information in their memories, 
people usually knew it and they can usually find it. People ca^ 
operate with imprecise and somewhat incoatplete plans, and they \n 
extrapolate their past experiences to :novel situations while 
recognizing that they are indeed qper?.ting outside the limits of their 
direct experience (Allen, 1982; Dreyfus and Dreyfus, 1986; Moray, 1986; 
Reason, 1986; Winograd and Flores, 1986) , 

Perhaps most ijiportantly, peqple are more playful than conputers and 
better at making mistakes, VJhereas conputers obey instructions 
literally, peqple often ignore or forget instructions, or interpret 
them loosely. Not only do people tend to deviate from plans and to 
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test the limits of assumptions, but many human perceptual skills and 
response modes depend on observing deviations from expectations or 
goals that may be evolving. Sometimes, people begin to doubt even 
their most basic beliefs. Ihus, people generally expect to make 
mistakes and to learn from them, and creative people may be very good 
at learning from mistakes, if they have sufficient time, people can 
learn to correct their mistakes and they can r^rogiam themselves to 
t^ advantage of unej?)ected situations. Although cortputers also 
observe and react to deviations, ccmputers have not yet ediibited much 
capability to devise goals for themselves, to reprogram themselves, or 
to qu^on their own basic premises (Valiant, 1984) . Cortputers must 
be told to learn from their es^iences, and efforts to enable them to 
learn have, so far, been restricted to very narrow domains of 
activity. Also, cortputers are good at not making mistakes in the first 
place, so they have less need to learn frm. mistakes. 

People are, however, pretty diverse and flexible. Some ceople can 
learn skills and perfcion tasks that other people find iiipossible; and 
since NASA can choose from a large pool of applicants, the extreme 
capabilities of exceptional people are more ijtportant in space systems 
than the average capabilities of typical people. Hie people v*io 
operate space systems first receive thorx3u^ training, so their 
deficits of inejqperience should be smal?.; but this training itself may 
impose serious liabilities, such as a tendency to rely on 
well-practiced habits in novel situations. 

Because people are flexible and coitiplex, they often surprise 
scientists and systems designers; People may change their behaviors 
significantly in response to ostensibly small environmental changes, or 
people may change their behaviors hardly at all in response to 
apparently large environmental changes. How people react to a 
sitaiation may depend quite strongly on the sequence of events leading 
^ to that situation, including the degree to vdiich the people see 
thCTiselves as having helped to create the situation. Accurate 
statements about microscopic details of human behavior rarely prove 
accurate as statements about general, macroscopic behavioral patterns, 
or vice versa. For example, ejqjerimental studies of people v^o are 
being paid low hourly wages for making repeated choices between two 
clearly defined, abstract symbols that have no inplications for later 
events probably say little about human behavior in real-life settings 
Where actions may have persistent and personally significant 
consequences and where actors may not even perceive themselves as 
having choices. Conversely, broad generalizations about the behaviors 
of most people in diverse situations probably say little about the 
4 carefully selected people who are performing unusual tasks 

in vmch they have great e^qjerience. 

nie research issues that are important for designing human-cortputer 
^tems seem to be ones concerning the proper balances among opposing 
advantages and disadvantages, rather than ones demanding new concepts; 
and the best resolutions of these issues are certain to shift as 
COTpiters acqiiire greater capabilities. Consequently, i will not 
atteipt to state any generalizations about the proper dividing lines 
between human and cortputer responsibilities in space systems, and l am 
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not advcx:ating any research aimed at describing human capabilities in 
general. Ihe designers of space systems should not depend on general 
theories, but should test fairly realistic mock-\:?)s of interfaces, 
hardware, and software, with people vdio are as well trained and as able 
as real astrona\its and controllers. The designers should also 
investigate the sensitivity of performance measures to small variations 
in their designs (Qoienenfelder and Whitten, 1985) : Do small design 
changes produce large changes in performance? Both to improve the 
quality of designs and to improve users' acceptance of designs, 
ejiperienced astronauts and controllers should participate in the 
designing of interfaces and systems; and because early decisions often 
constrain later modifications, astronauts and controllers should 
participate from the beginning of any new project (Grudin, 1986) . 



PEOPLE INTERACriNG WITH OCMFUTERS 

Today's conputers cannot imitate people very closely, but the 
differences between people and coitpiters imply that combinations of the 
two can achieve results beyond the capabilities of each alone. For 
that reason, NASA should devote research effort to improving the 
interactions and synergies between people and conputers. 

Fxve research topics seem especially interesting and important 
because (a) I can see how to pursue them and (b) I can foresee some 
research findings that would translate directly into iirproved 
performances by space systems. 

1. Fostering Trust Between People and Expert Systems 

2 . Creating Useful Workloads 

3 . Anticipating Human Errors 

4. Developing Effective Interface Languages 

5. Using Meaningful Interface Metaphors 



Fostering Trust Between People and Expert Systems 

Decision-siipport systems are conputer programs and data bases that are 
intended to help people solve problems. Some decision-si:pport systems 
merely afford their users easy access to data; other decision-si:pport 
systems acooally propose solutions, possibly basing these proposals on 
data si^jplied by their users (Woods, 1986b) . 

E5$)ert systems are decision-si:5)port systems that attenpt to embody 
the specialized knowledge of human e55)erts. Their proponents argue 
that e55>ert systems can, in principle, make specialists* knowledge 
available to nonspecialists: every CPA mi^t be able to draw upon the 
combined e)5)ertise of several tax specialists; every general 
practitioner mi^t be able to make subtle diagnoses that reflect 
advanced training in many specialties. E>qpert systems mi^t perform 
even better than human ej^jerts: Corrputers may be able to obtain data 
that would be unavailable to people (Burke ajid Nontand, 1987) . 
Conputers* huge irismories and hi^ speeds rf>±gtit enable them to 
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investigate more alternatives or to take account of more contingencies 
than people consider. Oaitp±ers may also avoid some of the logical 
errors to vMdi people typically fall prey, and thus may draw some 
inferences ^±at people would miss (Bcbrcw et al., 1986) ~ Advocates of 
statistical decision theory value corrputers ' ability to adhere quite 
strictly to such fonnulae. Some proposals would have cotpaters 
formulating reccramendations and people then screening these 
reccaransreaations axid d^iding vdiether to accept them (Burke and Normand, 
1987; Dreyfus and Dreyftis, 1986; Wbods, 1986a, 1986b) . 

Not everyone holds an optimistic view of e)$)ert systems' potential. 
Stanfill and Waltz (1986:1216) remarked: '-Rule-based ejq^ert systems ... 
tend to fail badly for problems even sli^tly outside their area of 
expertise and in unforeseen situations." Dreyfus and Dreyfus 
(1986:108) have argued that human esqjerts do not follow decision rules 
buit instead they remember "the actual outcomes of tens of thousands of 
situations", and that "if one asks the experts for rules one will, in 
effect, force the ej$>ert to regress to the level of a beginner and 
state the rules he still remembers but no longer uses." Consequently, 
Drey^ and Dreyfus (1986:109) predicted "that in any domain in vihich 
people ejdiibit holistic understanding, no systems based upon heuristics 
will consistently do as well as experienced experts, even if those 
e35>erts were the informants viio provided the heuristic rules. " 

Dreyfus and Dreyfus' critique may be valid. Dutton and I (1971) 
spent six years stu£fyii^ an expert production scheduler named Charlie, 
including one full year investigating his procedure for estimating how 
much production time any schedule represented. Charlie estimated time 
by using the relation: 



Production Time = Schedule length / Speed 

"We gradually were disabused of the idea that Charlie has a cortputation 
procedure for speed and were convinced that he obtains his speed 
•estimates by a table look-v?). That is, Charlie has memorized the 
associations between speed and schedule characteristics, and he looks 
vp speeds in his memory in sone&diat the way one looks up telephone 
numbers in a directory. In our interviews, Charlie talked as if the 
existence cf a computation procedure was a novel idea, intriguing to 
conterrplate but difficult to conceive of. He thinks of the speeds in 
his table as discrete numbers distilled frcan a long series of unique 
e}?)eriences. Althou^ he can interpolate and extrapolate these 
numbers—iirplying that the stored speeds must be specific examples frxan 
a systematic family of numbers—he distrusts the interpolated values 
and speaks of them as hypotheses to be tested in application. The 
stored values are so much more reliable that they mi^t be a different 
kind of information altogether, in fact, Charlie can recount, for a 
large proportion of his table entries, specific remembered situations 
in vMch the circumstance was encountered and the speed observed. The 
on]y speeds that he does not so document, apparently, are those 
appropriate to situations arising almost daily" (Dutton and Starbuck 
1971:230). ' 
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We calculated that Charlie had menorized approximately 5000 
production speeds corresponding to various situations. But we also 
discovered that Qiarlie's production-time estimates could be predicted 
quite accurately by a siitple linear equation that had a meaningful and 
genercilizable interpretation in terms of the physics of the production 
process. Rather than thousands of machine speeds, this linear equation 
required only a few hundred paran^ters. Ihus, we could state a 
procedure that was sinpler than the one Charlie used; and because this 
artificial procedure had a physical interpretation, a iiser coxild more 
confidently extrapolate it to novel production situations. 

One of the best-Jaiown expert-s^sbm projects not only produced a 
heuristic program, DENDRAL, but also led to the development of an 
efficient algorithm for generating molecular structures (Bennett et 
al., 1981) . Evidently, the heuristic program has received little 
practical vise whereas the algorithm has had much (Dreyfus and Dreyfus, 
1986). 

One obvious question is: why must ej^pert systems closely resemble 
human e^qperts? The prc^xanents of e}q)ert systems typically equate 
ej^Dertise with hxmoan beings, so they see imitating huitan e55)ertise as 
essential to creating ej^^ert systems; and their critics focus on the 
differences between conoputers and people. Yet, conpaters possess 
different abilities than people. Cca[ipiter programming effoi±s that 
have begun by imitating human behavior have often ended up using 
techniques that made no pretense of imitating himan behaviors; and 
engineers and scientists have devised, without imitating human 
e3q>ertise, many techniques that enable computers to exceed the best of 
human capabilities. 

Other questions arise concerning people's willingness to depend upon 
computer-based expertise. Collins (1986) interviewed actual and 
potential users of several widely kncwn ej^jert systems for accounting, 
chemical analysis, mathematics, msdiced diagnosis, and 
cxanopiter-componerrts ordering. She found only one of these e)$)ert 
systems that has active users: th(^ one for ordering computer 
components (Rl) . It has strai^t-forward logical processes and it 
draws no subtle inferences; it mainly helps sales personnel forget no 
detciils v4ien they fill in orders, and the sales personnel said they 
appreciated not having to waste their time worrying about details or 
waiting for access to a human e)q5ert. It may be relevant that the 
users of this system sold conoputing equipment. Concerning the other 
ej^jert systems, potential users ej^ressed considerable distrust, of 
other human 355)erts as well as cbrtpjiters; and the potential users may 
view these systems as threatening their own e>5)ertise. Hcwever, the 
people vAio actually participated in creating these systems said they do 
trust them and would, but do not, use them. Collins inferred that 
trust in an e>5)ert system comes either from participating in the design 
process or from being able to change the system to reflect one's own 
e55>ertise. Ihis infei'enoa meshes v;ith the general pattern of 
psychological research, but neither of these options was available to 
the cx3mputing-equipment sales personnel, who were the users voicing the 
greatest trust in an e55)ert ^t>am. 
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CJcraplex issues surround the idea that a user should screen an ei^jert 
system's recommendations and decide v^iether to accept them. If an 
ej^jert system draws the same inferences that its user would draw and if 
it recomraends the same actions that the user would choose, that user 
will easily learn to trust the system. Such seems to be the case with 
the ej^jert system for coitpiter-ccnponents ordering. Such a system may 
relieve pecple frcsn having to perform boring or easy work, but it adds 
very little to a user's intellectual capabilities, x^diereas in 
principle, oortpiters' precise logic and extensive coirputation 
capabilities and the incorporation of exceptionally hi^-quality 
expertise mi^t enable expert systems to draw substantially better 
inference than their users and to choose distinctly better actions. 
Yet a user is quite likely to distrust an ejqjert system that draws 
significantly different inferences and that chooses significantly 
different actions than the user would do. If the e^qpert system also 
uses a conpitational procedure that diverges quite dramatically from 
human reasoning, the system may be unable to ejqjlain, in a way that 
satisfies lasers, vdiy it draws certain conclusions and not others. 
Distrustful users may never discover \^ether an eJ5)ert system is making 
good rcicammendations or bad ones. 

iMs calls to mind the experience of a manufacturing firm that 
installed one of the first conpiter-based systems for job-shop 
scheduling. The system's creators prcanised that conpater-generated 
schedules would produce considerable savings in coirparison to 
human-generated schedules. The factory's managers, however, were not 
entirely sure of the goodness of ccarputer-generated schedules, and they 
wanted to minimize the iirplied insult to their hvraan production 
schedulers, so the managers told the schedulers to follow the 
cortpiter's recommendations as long as they agreed with them, but to 
substitute their own jijdgement vdien they thou^t the ccoraputer had made 
bad recorarauidations. An evaluation conducted after one year showed 
that the ccatipiter-based system had yielded no inprovements vdiatever. 

But research may be ablt to suggest some answers to these issues, at 
least in part; and good design may be able to resolve them: Expert 
systems, even the ones that cannot meaningfully explain the reasoning 
that leads them to make certain recommendations, should be able to 
ej^jlain vdiy they believe their recommendations to be good. People v^o 
cannot formulate a good reccanmendation may be able to recognize a good 
recommendation or a bad one, and pecple do sometimes recognize their 
own limitations. At least some of the people who manage factories have 
learned to trust conpiter programs for production scheduling or 
inventory control even thourti these people could not themselves 
generate the coitputers' solutions. 

The foregoing observations hi^i^t the practical significance of 
research about the factors that influence people's trust in coitpjters' 
ejqoertise. In vdiat ways should a decision-si^jport system's knowledge 
and logical rules fit each user individually? Given opportunities to 
tailor interfaces to their personal preferences, inexperiencai users 
may design interfaces poorly (Dumais and Landauer, 1982) : Do users 
trust systems more or less when tailoring is post^xaned until the users 
gain considerable e>^ience? Hew do task characteristics affect a 
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user's willingness to tnist a decision-si^jport system? In \^t 
cin:MinstarK::es does a user decide to trust a computer system that 
captures the kncwledge of e3q)erts whcm the user does not know 
personally? What kinds of e>?)eriences lead a user to trust a 
decision-si^port system that the user regards, at least partly, as a 
blaciWxsx? What lands of e}5>eriences encourage a user to see a 
decision-support ^^stem's limitations and to override bad 
recommendations? 



Creating Useful Workloads 

Automation tends to make carpiters responsible for routine, easy tasks 
and to leave the nonroutine, difficult tasks for people. One reason 
for this may be the perception that nonroutine tasks are interesting 
and challenging, and thus worthy of human attention, whereas routine 
tasks appear ea^ and uninteresting, and so detteaning to people. But a 
more iitportant reason may be the practicality that designers can figure 
out how to autcaivate routinized activities \diereas they cannot 
effectively automatje activities that vary. 

Btiis division of labor produces the consequence that, as automation 
progresses, people's work becomes more and more diverse and 
irpredictable and it takes on more and more of an emergency 
fire-fitting character. At the same titne, cutting people out of 
routine tasks isolates them from on-going information about wtiat is 
happening and forces them to acquire this information while they are 
trying to perform nonroutine, difficult tasks. The human controllers 
in a system may not even be warned of gradually developing problems 
until tie system exceeds critical liitdts and alarms go off (Weiner, 
1985) . Ihus, people's work grows less do-able and more stressful 
(Senders, 1980) ; and extreme stress and extreme time pressure may cause 
people to do poorer work and less of it. 

In majiy tasks, automation also increases the short-term stability of 
the variables used to monitor performance; as Weiner (1985:83) put it, 
"automation tunes out small errors and creates qpporcunities for I'lrge 
ones." De Keyser (1986) has suggested that this short-term 
stabilization causes the human operators to shift from an anticipation 
logic to a recovery logic: instead of keeping track of events and 
trying to manage th^, the operators wait for significant undesirable 
events to occur. Furthermore, "At the hi^est automation stage, the 
production operator has only very sketchy operating images of process 
ana installation. ... He will not make a huge investment in 
QJ:«servation, checking, jiadging, establishing relationships, gathering 
of data without being certain of its usefulness. Ihe operator does not 
invest psychologically in a role vMch escapes him" (De Ifeys'^r, 
1986:234-235). Hence, De Kfeyser et al., (1986:135) have advocated that 
"the person still play an active part in the ongoing activity, not 
because this presence is required, but because it automaticcilly keeps 
the person xsp to date on the current status of the system, the better 
to respond if an emergency situation develops." This seems a plausible 
hypothesis, but an equally plausible hypothesis would be that operators 
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tend to work iiedhanistically v*ien they are perf onriing the kinds of 
activities that cx>ald be automated. 

De Yeyser also, hcwever, pointed out that serious emergencies call 
for as much axitcmtion as possible becaiise they produce extreme tine 
pressures, extremely ccmplex problems, and extreme dangers—all of 
vdudi greatly degrade the capabilities of human operators. Of course, 
people are utterly unable to respond as quickly as some emergencies 
demand* This poses a c::satch-22* As long as the designers of a system 
have sufficient understanding to be able to prescribe how the system 
should respond to a serious emergency, they should incorporate this 
imderstanding in the system's autcana'uic responses. But such conplete 
understanding should inply that the autoanatic system works so well that 
a planned-for serious emergency never occurs* Ctonsequently, v4ien a 
serious emergency does arise, is not design error one prominent 
hypothesis about its causae, and does that hypothesis not reivier suspect 
the diagnostic inf ontation being produced by the system? Any 
systemrdesign process establishes a f irane of reference that identifies 
scxoe events as relevant and irtportant, and other events as irrBlevant 
or uninportant; and a cost-^fective syst^ xnonitors the relevant and 
iroportant events and ignores the irrelevant and uniirportant ones. But 
this is likely to mean that the system lacte^ information about some of 
the events that produce a serious emergency, and the incoirplete 
information that the system does have available may well lead human 
diagnosticians astray. Moreover, human operators v*io participate 
continuously in a system mi^t grew so familiar with the system and its 
current status that they overlook anomalies and lack tl-e objectivity to 
re^x>nd effectively to a serious emergency. 

Trying to diagnose the causes of an unesqpected emergency and to 
develc^) remedies, human operators must vinderstand coirputers and other 
machines extremely well, vMch iirplies that they are quite comfortable 
with coitputers and with the causal models they incorporate; but on the 
other hand, human operators must distrust their conputers and 
ccamputer-based models sufficiently to be able to sift 
conpiter-generated information with skeptical eyes. Similarly, 
confidence in their training can help people remain calm in an 
emergency, but confidence in their training also blinds pecple to its 
shortccoodngs. It thus seems likely that the people v*io do the most 
good In emergencies have an ability to discard their preconceptions arid 
to lock at situations from new poiiits of view (Luchins and Luchins, 
1959; Watzlawick et al., 1974) . NASA should investigate the degrees to 
vMch such an ability varies among people and can be predicted or 
tau^t. 

Workloads vary in duration as well as intensity. People can cope 
with very intense workloads for short periods, yet they ej^jerience 
stress from moderate workloads that persist for long periods (Turner 
and K^rasek, 1984) . Some physiological reactions to stress, such as 
lolcers and vulnerability to infection, take time to develop. Thus, the 
short-duration shuttle flints do not afford a good basis for 
forecasting the workloads to be e3q)erienced on long-duration tours in a 
space station. NASA should contiiiue to ir^vestigate the workload 
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e3q)eriences gained from long stays in cx>nf ined spaces such as 
Antarctica, Sealab, and nuclear submarines (Bluth, 1984) • 



Anticipating Human Errors 

Overloading causes people to mke errors, but so do boredom, 
inattention, and indifference. Human errors are both prevalent and 
inevitable (Senders, 1980) , and many human errors are desirable despite 
their costs* People e35)eriment, and some of their es^jeriments turn out 
badly. People deviate from their instructions, and some of these 
deviations have bad consequences. 

Norman (1983, 1986) and Reason (1979, 1986) have initiated research 
into the causes of errors and ways to prevent or correct them. Norman, 
for instance, distinguished errors; in intention, \diich he called 
mistakes, from errors in carrying out intentions, \*dch he called 
slips. He classified slips according to their sources, and then sou^t 
to prescribe reiaedies for various slips. Table 1 lists some of 
Norman's categories and prescriptions. 

Recognizing errors' iirportance, NASA's Human Factors Research 
Division is currently conducting some well-thou^t-out research on 
error-detection and on error-tolerant systems. Error-detection systems 
would warn people v4ien they appear to have omitted actions, to have 
acted out-of-order, or to have taken harmful actions. Error-tolerant 
systems would first detect hxman errors throu^ imcbtnasive monitoring 
and then try to remecfy them. 

Ihis research has much to recommend it. But some errors are very 
costly to tolerate, and some errors are very costly or iirpossible to 
correct. So human-conpiter systems should edso try to predict human 
errors in order to make serious errors unl.ikely in advance (Schneider 
et al., 1980; Shneiderman, 1986). lhat is, prevention may be cheaper 
and more effective than cure, and research on error prevention mi^t 
usefully conplement the current projects. 

Of course, all human-coitpiter systems ejq^ress sane assunptions about 
their human participants. Ihese assuitptions have nearly eilways been 
iirplicit; and they have nearly always been static, insofar as the 
assuirptions liave not changed in response to people's actual behaviors 
(Rouse, 1981; Turner and Karasek, 1984) . For many tasks, it would be 
feasible to explicate fairly accurate models of people. In fact, 
models need not be very accurate in order to make useful predictions or 
to suggest v*iere adaptability try people's actual behaviors might pay 
off. Computers mi^t, for exaiiple, predict that people v*io respond to 
stimuli quickly are more alert than people vdio respond slcwly; or they 
mi<^t predict that e:$)erienced people would respond more quickly than 
ine>$)erienced ones; or they mi^t predict that people would be more 
likely to behave in habitual ways than in unusual ways; or they mi^t 
predict that people would be less concerned about small discrepancies 
v*ien much activity is occurring. Based on a review of human-factors 
research, Sjmes and Sirsky (1985) hypothesized that: 
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TABIE 1 Sc3me Error Categories and Prescriptions 



Forming the Wroncr Intentions 



Description errors: 

aitibiguous statements of 
intentions 



Mode errors: 

misclassifications of systems* modes Eliminate modes. 

Give better indications 

of modes. 
Use different commands 
in different modes. 

Arrange controls 
meaningfully. 
Give controls 
distinctive shapes. 
Make it difficult or 
inpossible to take 
actions that have 
serious, irreversible 
consequence3. 

Suggest alternative 
explanations. 
Point out discrepancies 
that mi^t be 
overlooked. 

Activatincf the Wrong Behaviors or Triggerincf Behaviors at the Wrong 
Times 



Misdiagnoses: 



Omissions: 

C2apture errors: 
very familiar behaviors replace 
less familiar behaviors 

Monitor actual behaviors vdiere 
similar behavior sequences diverge. 



Remind people of 
unconpleted actions. 

Minimize overlapping 
behaviors. 



SOURCE: Norman (1983, 1986) 



• e55)erience or frequent use of a corputer system decreases 
people's need for immediate feedback (closure) , 

e e)5)erience or frequent use decreases the iitportance of human 
limitations in information processing, 

e ejqperience or frequent use decreases the impact of sensory 
overstimiiLation, 
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& task coiplexity increases ine}5)erienced people's need for 

immediate feedback, 
m task ccoiplexity increases the iitportance of human limitations in 

the information processing by ine55)erienced people, and 
© task conplexity increases the inpact of sensory overstimulation. 

As NASA's human-factors scientists well understand, coitputers that 
predict, detect, and remedy human errors raise issues about v^o is 
actually in control. When should people have the ri^t to ej^^eriment 
cr to deviatr from their instructions? 



Developing Effective Interface Languages 

Comntanication between people and coitpiters may resemble communication 
between people \iho come from very different bad^rounds, say a 
tribesman from the Kalahari decert and a whiz-kid mathematician from 
Brooklyn. Becax:ise conputers do differ from people, the people who 
interact with computers need to remain aware of these differences, and 
the interfaces for human-coirputer interaction should remind lasers of 
these differences. Ihis need became clear during the 1960s, vAien 
Weizenbaum created a program, ELIZA, that conversed in English. ELEZA 
had almc^ no understanding of the topics about which it conversed. 
Instead, it imitat-ed blindly the vocabularies of the people with whom 
it conversed; in effect, ELEZA merely repeated people's words back to 
•diem. Yet Weizenbaum (1976:6) observed: "I was startled to see how 
qoickly and haw very deeply people conversing with [ELEZA] became 
emotionally involved with the ccarpater and hew unequivocally they 
arithropamorphised it.'- 

Weiseribauin's m^^re cci^-r ^iL exaimples coiic^med people vdio did not 
have close acquaintance with conpiterj. Nearly all of the research on 
human-<xa:rpiter interaction has focused on people v4io lacked thorou^ 
tjcoining and \*io had little expeci^ice with coirputers. Aithou(^ such 
r(*seardh findings can banefit the design of training programs, design 
characteristics that have strong effects on novices iTiay have negligible 
effects on e^qpert users, so most of these findings may not extrapolate 
to the vTell-^ ^ined and e55)erienced c^5erators of space systems. There 
is need for studies of well-trained and e^q^erieiK^ed users. 

Sheppard, Bailey, and their colleagues (Sheppard et al., 1980, 1984) 
have ruTi ejqperments with professional programnvers having several years 
of experience. Ihe first three e>a)erijnents involved progrdnis or 
program specifications thit were stated either in flowdia2± symbols, or 
in a constrained program-design language, or in carefully phrased, 
normal English. These ej5)eriments asked experienced programmers to 
answer questions about program specifications, to write and debug 
programs, or to correct faulty programs. The fourth experiment omitted 
flowchart symbols and substituted an abbreviated English in which 
variables' names replaced their English descriptions; and the 
programiiiers were asked to add instructions to programs. Table 2 
summarizes the results: Normal English turned out to be consistently 
inferior, and the program-design language proved consistently superior. 
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TABIE 2 How Experienced Programmers' Performances Vary with 
Different languages 



First experiment; answer caiestions about program specifications 



Normal Flowchart 
English Symbols 



Tiros needed to answer: 

Forward-tracing questions 
Backward-tiiracing questions 
Inpit-out^jut questions 

Percent of programmers 
preferriiig 



45.9 
46.8 
42.9 

14 



37.6 
37.6 
39.4 

33 



Second experiment; write and debug programs 



Normal Flcwchart 
English Symbols 



Time needed to write 
and debug programs 

Editor transactions 
before solution 

Attempts before solution 

Semantic errors 

% of programmers preferring 



29.7 

37 
3.0 
2.4 
6 



T hird experijnent; correct faulty programs 



Tiroe needed to 

correct faulty programs 
Attenpts before solution 
Percent of programmers pref erriny 



Normal 
English 

18.7 
1.9 

33 



23.9 

39 
2.7 
1.4 

35 



Flcwchart 
Symbols 

14.2 
2.2 

34 



Fourth experiment; modify and debug programs 



Time needed to modify and debug 
Semantic errors 

Percent of programmers preferring 



Normal 
English 

28.1 
.9 

18 



Abbreviated 
English 

26.6 
1.3 

32 



Program-design 
language 



35.1 
35.8 
41.0 

53 



Program-design 
Language 



20.5 

32 
2.2 
.8 

59 



Program-design 
language 

14.5 
1.9 

33 



Program-design 
language 

25.0 
1.0 

50 



SOURCE: Sheppard et al. (1980, 1984) 
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One liability of a natural language such as English is its 
generality: Because vocabularies are large and linguistic structures 
are flexible, much anibiguity surrounds each word, phrase, and 
sentenrte. Speakers can make statements that mean almost arr^^thing, or 
nothing. Even a restricted natural language, probably because it 
resembles xxnrestricted natural language, may make users vmcertain vdiat 
coramands are legitimate and meaningful to the ccaiputer system ( Jarke et 
al., 1985; Shneiderman, 1986) . Ambiguity and unused complexity create 
noise. 

Both people and ccaiputers absoii) information faster and more 
accurately yhen their interactions make good vise of themes, chunking, 
and sequences (Badre, 1982; Siines and Sirsky, 1985). Overall themes 
can help people or coonoputers to predict vAiat information to e>5)ect and 
vtet information is iitportant. Effective chunking aggregates 
information into batches that have meaning witloin the context of 
specific tar':s. Effective sequencing presents information in a 
familiar, ^ .edictable order. Themes, chunking, and sequences can 
inprove Cdraitunication in any language, but they may become more 
inportant \i*ien a language has more generality. 

A secoxvJ liability is that natural language evokes the habits of 
thinking and problem solving that people use in everyday life. Green 
et al. (1980:900-901) remarked, for example: 

"The fundamental strategies of parsing used by people seem, in fact, to 
be aimed first and foremost at avoiding parsing altogether 

(i) if the end of the sentence can be guessed, stop listening; 
(ii) if semaiitic cues or perceptual cues (boldface, indenting, 
pitch and stress in speech) are enougji to show what the 
sentence means, stop parsing; 
(iii) if syntactic signals (and, -s, -ly, etc.) are available, lose 

them to make a guess at the sentence structure; 
(iv) if there is no help for it, make a first shot at parsing by 
cementing together the closest acceptable pairings—noun to 
the neixrest verb, if to the next then , etc. ; 
) only if that f.irst shot fails, try to figure out tiie 
structure by mtching up constituents properly. 

Not \ir±il Step (v) does the human start to parse in a manner anything 
like the conputer scientists' idea of parsing; and the phrase 'figure 
out' has been used advisedly, for by the time that step is reached 
people are doing something more like problem solving than routine 
reading or listening." 

Information displays can inprove conprei*ension by offering symbolic 
and, especially, perceptual cues that help people to interpret 
messages. However, designing good displays is made conplicated by the 
potentially large effects of overtly small cues, m a study of a 
command language, for instance, Payne et al. (1984) found that lasers' 
errors dropped 77 percent vAien the operator words were displayed in 
t^per case and the operands were displayed in lower case, thus 
providing visual distinction between the two categories. Further, 
changes that improve performance in one context often degrade 
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perfomance in another cx)ntext, and changes that inprove one diniension 
of performance often degrade another dimension of performance. A 
flcwchart, for exanple, may help users to trace forward to the 
consequences of sane initial conditions but it may iirpede their 
backward inferences about the antecedents of some terminal conditions 
(Green, 1982). 

A third liability may be that natural languages lead users to assume 
that oar$>uters' reasoning resembles human reasoning, vdiereas artificial 
programming or query languages remind users that conpaters' reasoning 
differs frcm human reasoning. This suggests that languages resembling 
natural ones might be more effective media for communication between 
people aixi coooputers in contexts vftiere the conputers closely simulate 
human reasoning and imderstanding, even thou^ artificial languages 
mi^t be more effective ccanmunication media in applications vftiere 
ccatputers deviate from human reasoning. 

Unstudied so far are the interactioiis between sociaT contexts and 
interface languages; virtually all studies of interface languages have 
involved people working on tasks that th^ could perform alone. Yet 
space systems create strong social contexts. Ihe operators talk with 
each other vMle the^ are interacting with conpiters: Queries between 
people instigate queries to cortputers, and messages from conputers 
beccane oral statements to other people. De Bachtin (1985) found that 
sales personnel who were interacting with a conputer and customers 
simultaneously greatly preferred an interface that allowed them to pose 
queries in rather free sequence and phrasing. Bius, interface 
languages that approximate natural languages mi^t turn out to be more 
valuable in space systems than in the situations that have been 
studied. 



One very significant contribution to human-conpater interaction was 
Jferox's Star interface, vdiich derived from many years of research by 
mariy researchers. The Star interface embodies a number of design 
principles that evolved from e5^)eriments with prototypes. According to 
Canfield Smith et al. (1982:248-252), "Some types of concepts are 
inheren'rJ.y difficult for people to grasp. Without being too formal 
about it, our e3^)erience before and during the Star design led us to 
the follcx/ing classification: 



Using Meaningful Interface Metaphors 



Easy 



Hard 

abstract 

creating 

filling in 

generating 

programming 

batch 



concrete 
copying 
choosing 



recognizing 
editing 
interactive 
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Ihe characteristics on the left were incorporated into the Star user's 
conceptual model. Ihe characteristics on the ri^t we attenpted to 
avoid. 

"Ihe following main goals were pursued in designing the Star user 
interface: 

familiar \:iser's conceptual nodel 

seeing and pointing versus remembering and 
typijig 

vAiat you see is vAiat you get 
universal ccmmands 
consistency 
sinplicity 

modeless interaction 
user tailorability 

..We decided to create electronic counterpartr to the physical 
objects in an office: paper, folders, file cabinets, mail boxes, and 
so on— an electronic metaphor for the office. We hcjped this would make 
the electronic 'world' seem more familiar, less alien, and require less 
training. ... We further decided to make the electronic analogues be 
concrete objects . Documents would be more than file names on a disk; 
they would be represented by pictures on the display screen. They 
would be selected by pointing to them. ... To file a document, you 
\fKrj^d move it to a picture of a file drawer, just as you take a 
piiysical piece of paper to a physical file cabinet." 

NASA's Virtual Environment Workstation illustrates a mj.ch more 
avant-garde metaphor (Fisher et al., 1986). This project would give a 
robot's operator the sensations and per^)ective of the robot: Screens 
in the operator's helmet woald show views taken by cameras on the 
robot; sensors would pick vp the operator's arm and finger mavenvents 
and translate then into movements of the robot's arms; and the 
operator's gloves would let the operator feel pressures that the 
robot's fingers feel. The operator would have the sensation of being 
inside the robot, and the rc±>ot would became an extension of the 
operator's arm and hand movements, even thou^ the rabot raight be many 
miles from the operator. 

Althou<^ metaphors constitute a fairly new frame of reference f or 
the designers of interfaces, a designer or \:iser can look xspon every 
interface as a metaphor of something, and thus the design issue is not 
viiether to adopt a metaphor but viiat metaphor to adopt. Each metaphor 
has both advantages and disadvantages. As Star's designers noted, an 
effective metaphor can both reduce the airount of learning that 
inexperienced users must do aixi accelerate that learning. An effective 
metaphor can also tap into users' well-developed habits and thereby 
reduce errors and speed responses; and e:q)erienced users as well o/? 
ine^^xsrienced lasers sho^y such improvements. For instance, ledgard et 
al. (1980) sli^tly modified a text editor so that its commands 
resembled short English sentences: The original, notational command 
RS:/KD/,/OV;* became CHANGE ALL "KD" TO "OK", and the no+-ati inal 
canmand FIND:/T00]5V became RDRWARD TO "lOOIH". As Tabic 3 shows, such 
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changes inproved the perfonnai.jes of fairly experienced xisers as well 
as inesqperienced lasers. 

TABLE 3 Text Editing With Different Ctoinmand languages 



English-like Notational 

Coirnmands Commands 

Users \d.th less than 6 hoiirs of experience: 

Percentage of tasks coitpleted correctly 42 28 

Percentage of erroneous commands 11 19 



Users with more than 100 hours of experience; 

Percentage of tasks completed correctly 84 74 

Percentage of erroneous coraraands 5.6 9.9 



SOURCE: ledgard et al. (1980) 



But every interface metaphor breaks down at some point, both because 
a metaphor differs frcm the situation it simulates and because an 
interface differs from the coirpiter it r^resents. People in real 
offices can take actions that users cannot simulate in Star's 
electronic office, and Star's electronic office allows actions that 
would be iitpossible in a real office. Siinilarly, a rt±>ot mi^t be 
unable to reproduce some of its operator's instinctive finger 
movements, and an operator in a shuttle or space station would lack the 
mobiliiy of an unc^nfined robot. Yet, users are likely to draw strong 
inferences about a computer's capabilities from the human-coitpater 
interface. Lsdgard et al. (1980:561) noticed that "the users made no 
distinction between s yntax and semantics . ... To them, the actual 
commands enibodiai the editor to such an extent that many were surprised 
\Aien told after the e)5>eriment that the two editors were functionally 
identical." 

One iitplication is that an interface metaphor, like an interface 
language, should maintain some intentional artificiality in order to 
warn users of its limitations. Are some of the intuitive expectations 
that users bring to metapiiors especially inportant to fulfill? For 
example, in designing the Virtual Enviirom^t Workstation, mi^t it be 
essential to use cameras that closely approximate the spacing and 
movemer.ts of human eyes in order to avoid having to retrain the 
operator's stereoscopic vision? Under stress, people tend to revert 
from specific, learned, conplex models back to generic, ccaranon-sense, 
simple mod.els: Which of the e^qpectations that users have unlearned 
throu^ training does stress reawaken? Does stress, ior instance. 
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incarease users • respansiveness to concrete, visible stimuli and 
decrease their responsiveness to abstract, invisible stimuli? 

A second irrplication is that designers should carefully e55)lore the 
limitations of an interface Hvetajiior before th^ adqpt it, and they 
should look xjpan a laetaphor as one choice frosti a set of alternatives, 
eadi of vMdi has advantages and disadvantages. Hcwever, the existing 
interface metaphors have been develc5)ed separately, with cOTsiderable 
ei3Dphasis being given to their uniqueness; and the processes that 
developed them have been poorly documented. So, interface desigi^rs 
neai to be able to gei^erate alternative metaphors, th^ need conceptual 
frameworks that hi^hli^t the significant properties of different 
metaphors, and they need systematic research to document these 
properties. 

it it it 

All of the forgoing topics inply that a catputer should adapt both its 
aj5)earance and the rules in programs to its user — ^to take account, for 
exaitple, of its user's technical e35)ertise, ej^^erience, frequency of 
vise, or manual dexterity. Hiis calls for development of 
sc^Msticated interface software (a so-called User Interface Management 
System) that will recognize the needs of different users, allow 
different users to ejqjress their personal preferences, and protect 
us(:jrs' individuality. Olius, the cca^puter needs to be able to identify 
a user quickly BDd xanequivocally, and if possible, without imposing an 
identification procedure that would irritate people or delay their 
access in an emergency. 



EEDPIE ADD IMAGINATION AND POETRY 

Efforts to justi^ space syscems in economic tenni will keep pressing 
for hitler and hi(^ier levels of measurable productivity/ so 
planners will tend to program the operators' activities in detail. But 
very heavy workloads raise the probabilities of human error, and 
coirputers will always be better than people at working tirelessly and 
obediently adhering to plans. Peqple contribute to space systems their 
ability to deal with the xme^^jected, and in fact, to create the 
vine)5)ected by ejq^erimenting am' innovating. They can make these 
contributions better if they are allowed some slack. 

Space systems' tasks are not all located in space. Space systems 
inevitably make educational contributions that transcend any of their 
immediate operational goals. One of the major contributions of the 
space program to date has been a photograph — a :)hotograph of a 
cloud-bedecked ball of water and dirt isolated In a black void. Before 
they saw that jiiotograiAi, people's understanding that mankind shares a 
common fate had to be abstract and intellectual; the photograph has 
made this vmderstanding more tangible and visceral. 

Peqple play central roles in educational activities because they 
serve as identifiable points of reference in settings that would 
otherwise seem mechanistic, remote, and alien. Another of the space 
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program's major contributions, because it put space exploration into 
x^ords that cau^t the human imagination, was Neil A, Armstrong's 
imforgettable observation: "lUiat's one small step for a man, one giant 
leap for mankind" (July 20, 1969) • 



SUMMARir OF I^XMlENIftTIONS AND QUESTIONS FOR RESEARCH 



Posterjjig Trust Between Pecple and E^qpert Systems 

"i-^t ways should a decision-si^sporb system's knowledge and logical 
i ules fit each i:iser individually? Do users trust systems more or less 
when tailoring is postponed until the \3sers gain considerable 
e55)erience? 

How do task characteristics affect a laser's willingness to trust a 
decision-si^^port system? 

In what circumstances does a user decide to trust a corputer system 
that captures the knowledge of e^^jerts whom the user does not know 
personally? 

What kinds of e^^jeriences lead a user to trust a decision-si^port 
system that the user regards, at least partly, as a black-box? 

VJhat kinds of experiences encourage a user to see a decision-si^^port 
system's limitations and to override bad recomnendations? 



Creating Useful Wbrkloads 

Does performing activities that could be automated actually keep human 
operators vp to date on the status of a ssystem, or do operators tend to 
work mechanistically when they are performing routine activities? Do 
himan operators v*io perform activities that could be automated respond 
more effectively to a serious emergeiKy becax:ise their participation 
i:5xaates them on the current status of the system, or does continuous 
participation make operators so familiar with the s/stem and its 
current status that they overlook anomalies and lack the objectivity to 
irespond effectively to a serious emergency? 

NASA should investigate the degrees to which an ability to discard 
preconceptions varies among people and can be predicted or tau^t. 

What have been the workload of es^jeri^ences during long stays in 
confined spaces such as Sealab, Antarctica, and niadear submarines? 



Anticipating Human Errors 

Research on error prevention mi^t usefully ccoooplement the current 
projects on error detection and error tolerarce. For many tasks, it 
would be feasible to e^^licate fairly accurate models of people that 
would enable hiiman-oaipiter systems to predict and adapt to human 
errors. In fact, models need not be very accurate in order to make 
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xaseful predictions or to suggest where adaptability to people's actual 
behaviors itd^t pay off. 



Developing Effective Interface Languages 

Virtually all studies of interface languages have involved individual 
people working on tasks that they could perform alone* Because space 
systaras create strong social contexts, interface languages that 
approximate natural languages may turn out to be much more valuable in 
space systems. 



Using Meaningful Interface Metaphors 

Are seme of the intuitive e>?)ectation£ that users bring to metaphors 
especially inportant to fulfill? 

Under stress, people tend to revert from specific^ learned, caiplex 
models back to generic, common-sense, siitple models: Which of the 
e35)ectations that users have imleamed throu^ training does stress 
reawaken? 

Interface designers need to be able to generate ciltemative 
metaphors, they need conceptual frameworks that hi^i^t the 
significant properties of different metaphors, and they need systematic 
research to document these properties. 



General 

NASA should develop a sophisticated User Interface Management System 
that will recognize the needs of different users, allow different users 
to express their personal preferences, and protect users' 
individuality. 

Is there a way for :i corrputer to identiQr its user quickly and 
unequivocally, without imposing an identification procediire that would 
initate pec^le or delay their access in an emergency? 

Since NASA can choose from a large pool of applicants, the extreme 
capabilities of exceptional people are more important than the average 
capabilities of typical people. 

Ihe people vAio operate space systems first receive thorou^ 
training, so their deficits of ines^jerience should be small. Nearly 
all of the research on human-computer interaction has focused on people 
\iho lacked thorou^ training and v*io had little experience with 
catputers, so most of these findings may not extrapolate to the 
well-trained and e^^jerienced operators of space systems. Tnere is need 
for studies of well-trained and e>qperienced users. 

Avoid reseaixh aimed at describing human capabilities in general. 
Instead, test fairly realistic mock-ips of interfaces and systems, with 
people yho are as well trained and as able as real astronauts and 
controllers. 
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Investigate the sensitivity of performanoe measures to snail 
variations in designs: Do snail design chaises produce large changes 
in perf omance? 

Both to mprove the quality of designs and to irrprove user^^' 
acceptance of designs, e5$>erienced astronauts and controllerr:; should 
participate in the designing of interfaces and systems. Because early 
decisions often constrain later modifications, astronauts and 
controllers should participate from the beginning of any new project. 
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DISCUSSION: 



CX^MENIS ON THE HUMAN ROLS IN SPACE SYSTEMS 
Harry L. Wo;ibers 



The theme of this synposium has been to delineate key research areas 
that need to be addressed in order to establish effective and reliable 
interaction of humans with automated and robotic systems in future 
manned space systems. Topics addressed in the earlier sessions 
included System Prcxiuctivity, Eqjert Systems, Language and Display for 
Huraan-OcBipiter CJoaranunication, C3anputer-Aided Monitoring and Decision 
Making, Tel^resence and Si5)ervisory Control, and Social Factors in 
Productivity and Performance. In this final session the speakers have 
addressed scsne of the broader issues related to the human role in 
future space systems. 

Professor Starbuck has examined the sharing of cognitive tasks 
between people and ccarputers and Rrofessnr Akin has examined the roles 
of humans and machines in previous space missions and has considered 
hew these roles may change in the future. 

In his paper, David Akin points out that any self contained device 
performing a useful function in space, \^ther human or robot, must 
rely on the same set of basic functions to adequately perform its 
mission. Ohese include: sensory, carputational, manipulative and 
locomotive capabilities and the environmental sv^port functions 
necessary for the device to exist. Humans evolved in the environment 
of Earth J s surface and are dependent x:pon a similar atmosphere and 
gravitational reference along with food, water and periodic rest/sleep 
periods. The space siqoport systems for extended-duration manned 
missions must acccsnmodate these human needs, perhaps even incauding a 
form of artificial gravity if it should prove necessary. On the other 
hand, machines can be designed to operate under a wide range of 
environmental conditions. The task vMdh we face is to understand the 
capabilities and limitations of humans and machines as determined from 
their past and present roles in space and to extrapolate to the 
future. Akin presents the thesis that it is not an either/or choice 
because there are necessary and sufficient roles for both humans and 
machines and there are significant limitations on both. 

Recent space missions have shewn that the human operator offers 
cooiibined advantages of manual dexterity and strength wiiereas most 
robotic systems available today are designed to provide either strength 
(e.g., for positioning large masses) or dexterity, but not both. On 
the other hand, humans can offer both capabilities. Humans represent 
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asocellent adaptive control systens, especially well suited for rapid 
processing ard integration of visual data, dey have demonstrated 
their capabilities in ^ce to itove large masses along with the 
capability for precise psychanriDtor coordination in delicate mechanical 
adjustments. 

Akin suggests that future research should be planned to produce a 
xi^aningfuJL data base on huican and machine capabilities and limitations 
iii sadi of the ftnKrtidanal categories. This will lead to a bettsr 
quantitative understanding of the appropriate roles of h .mans and 
machines and will alio;;? system planners to "knew vMch tasks are worth 
automating and v*iich ones" will best bs done by himaans for the 
foreseeable future. He points cut that it is not enoui^ to understand 
limitations and capabilities of each of the ooaiponent technologies, but 
we must also urxlsrstand the subtle interactions between the human and 
the inadhines to define the appropriate roles of each. 

Recognizing that hiimans and machines may be able to perform the same 
tasks but m^y xase different techniques in acccatplishing them, Akin 
suggests that we also need to develop appropriate metrics in order to 
be able to produce meanijigful ccai2>arisons. 

He further points out that alinost all of the designs currently 
propoBsd for telerobotic systems are anthropocentric tending to 
dipiicate the human form. He suggests that since the htanan fcrra 
evolved in a gravity field it may not be the best model tor space 
activities and alternate forms and taiinolpgies should be studied. 

Akin concludss that: (1) robotic sysrt:sms are evolving rapidly, (2) 
both human and robotic systems have strengths and weaknesses; (3) for 
any future systems the best mixture of each is a tii^ d^^endent 
solution; and (4) for the immediate future^ the presence of each in 
space is an absolute necessity for the effective use of the other. 

From my persorel p^srspective, the criteria of performance, cost and 
missicns success prx±)ability (program confidence based on schedule risk 
and technological" risk) are the principal factors that program managers 
and ^stem engineers use in selecting the optimum design approadi for 
meetii^ mission objectives. Much as we may wish it to be otherwise, 
cost and cost effectiveness will continue to be important factors in 
designing future systems. I would urge, in addition to the metric 
ccjtparisons of performance suggested by Akin, that i^ere possible, 
indices of relative cost also be provided in order that design 
engijneejis may have a basis for ensuring the most cost effective 
utilization of the human operator in the space system of the future. 

William Starbuck, in his paper, reminds us that people are flexible 
and coifplex. On one hand, they can change their behavior significantly 
in response to small environmental changes and on the other hand, they 
change hardly at all in response to apparently large environmental 
Jhanges. 

Starbuck has very eloquently hi^Ji^ted the behavioral dif fai^ces 
between people and ccarputers and suggests that these differences can 
also mean that combinations of the two can achie^/e results beyond tlie 
caprJDilities of either alone. He stresses that in defining inportant 
research issues in him^an-conpiter systems we should be concerned with 
achieving the proper balance among the opposing advantages and 
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disadvantages and we must recognize tliat the dividing lines are fluid 
and d^jend heavily x^pon the evolving state-of-the-art in cxatrouter 
design. Accordingly, StarfcucJc suggests that space system designers 
should not d^jend on general theories but rather test specific 
iitplementation concepts vdth the actual users as subjects. 

^ Stariauclc si^ests that future research efforts can profitably be 
directed tcward liiproving the interactions and synergies between people 
and conpiters. I a suggests five research topics as being especially 
interestii^. ^liese are: x 

(1) FosterincT Trust betwe en People and Expert Sy stfrny;; e.g., 
es^loring questions regarding the degree a decision-si?^rt 
systems' knowledge and logical rules should be tailored to each 
user, and the factors that iinpact the users trust and acceptance 
of the ccaipiter system. 

(2) AvoidincT Overload of Human Oontirr)llp.rc; ; e.g. , ejqplorir.g the 
delicate balance between information overload, yet keeping the 
human in the loop by providing suf ficieifc information for the 
human to respond appropriately \^en emergencies do arise. 

Anticipating Human Errors ; e.g., ej^loring the basic questions 
of people monitoring machines or machines monitoring people 
Ooaipiters that predict, detect and remedy human errors raise 
issues about vflio is actually in control. Starbuck asks "When 
should people have the ri^t to e?)eriment or deviate frxsn their 
instructions?" 

^) Developing Effenhivp T nterface laTyjii^g pg; e.g. , aqjloring the 
interactions betwee)i social contexts and interface languages. 
Starijuck points out that for ©^jerts, working alone, program 
design languages may be si^jerior to natural language 
interfaces. On the oth<=ar hand in space systems, operators with 
different cultural and scientific backgrounds may need to talk 
to each other while interf acii^ with ccanputers and natural 
language interfaces may prove more effective. 

5) ^sing Meaningful Inter face Metaphors ; e.g., ej^loring and 
establishing the conc^jtual frameworks that hi^i^t the 
significant properties of different metaphors and their 
applications. (Every interface is a metrphor of something. ) 

Starbuck believes that NASA should develop a sophisticated User 
Interface Management System that will recognize the needs of different 
us^, allow different users to egress their personal preferences, and 
protect the user's individuality. He points out that in the 
foreseeable future, space crews wi]l continue to represent an 
a<ceptional class of people in abilities, training and eiqperience. 
mis suggests to Starbuck a more immediate need for studies of well 
trained ej^ienced users, rather than research aimed at describing 
human capabilities in general. 
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In providing a jEraiae of reference for canmenting vpon the humari 
factors research areas identified by William Startaack and David Aldn, 
we mi^t note that laSA^s current Space Station mission model covers a 
brtDad range of scicmtific and technical objectives. Ihis model 
suggests xuvacc as ths sophistication of future payloads increases, there 
will be an aoocwpanyli^ shift in crew si^^port skills and requirements. 
A transition can be anticipated with the progression of tiroe, from the 
ioore physical tasks of orbital assembly and installation to more 
intellectually oriented work activities. 

To more effectively vise human intelligei>ce, a better match is 
required with machine intelligence and with "e^q^ert" systens. Work 
stations xoast (1) oamnunicate fliiently with hvnnans (speaking, writing, 
drawir^, etc.), (2) assist in interaotive problem solving and inference 
functions, and (3) provide knowledge base functions (-information 
storage, retrieval, and "e>?)ert" systems) for support. 

Based vpan the observations of the preceding speakers it would 
appear that the research issu^ related to work-station design would 
logically fall into three categories. Ihese are: (1) Research on 
Information Seekix^ Processes, (2) Researvii on Informatiori/Data 
Handling Processes, and (3) Research on Operation Enhancement 
Processes. 

Research programs desding with Information Seeking Processes should 
include sensory/perc^jtual research dealing with all sense modalities 
as well as oontliiuing visual display developtient. (Continuing effort 
is required In the development of visual display formats, inasmuch as 
it is anticipated that, just as today, 80% of the information required 
by future '^ce crews will be obtained thrcu^ the sense of si^t. ) 

I would groap Startauck's five research topics uxxier the subject of 
Information/E)ata HancLLincf Procesg-:>s . In ejqpanding his recommendations 
for establishing Meaningful Interface Metaphors I would also inclvbde, 
as a relatai tcpic, research and developnent of a Univ..a:sal User 
Interface Management System (UIMS) . This concept for a software system 
that handles all direct interaction with the viser, potentially for a 
wide variety of underlying applications, began to emerge in the 
human-conputer interface literature several years ago. Ihe concept 
involves two main corponents: (1) a set of tools Jor developers to use 
in speciQ^ing v's?aal ani logical aspects of the user interface; ani (2) 
a set of run •*'ime programs and data bases for actualj.y controlling 
interaction with the users. Scsive of the potential advantages of a UIMS 
would be: 

• Independence of the user interface software and the app?.ication 
software. 

• More intelligent user interfaces. 

0 Rapid prototypir^ capability for use in development. 

m Easier iiivolvement of manual systems and fli^t crew personnel 
in user int:erface design and evciliiation. 
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9 Consistency accross applications. 

• Multiple user interfaces to the same application if desired 
(e.g., novice vs. e}$>ert nodes of interaction) 

« Device independence (i.e., application software does not have 
to know anything about vdiat type of irpit device a request came 
frcan or vdiat type of output device the results will be displayed 
on.) 

Althou^ Starbuck does not advocate research aiined at describina 
human capabilities in general, I can't help but believe that contiiiuing 
research on the nature of human cognition can provide insists that 
vail lead to the develcpnent of work stations permitting more effective 
If^^f 5^ cx)gnitive capabilities. Conversely, studying the best and 
br latest representatives of the user ccitimunity as they interact with 
the evolvirjg concepts of expert systems, may in turn provide insights 
toward defmmg a structure of human intellect for mankind in general. 

Research on Operati on Enhancement should include those research 
areas identified by Akin such as intelligent rdbatics, and the 
mechanization of effector/actuator systems. 

In addition to research dealing with Information Seeking, 
Information Handling, and Operational Enhancement Processes continuing 
attention also should be directed to the develcpnent of assessment 
techniques. Ihese mi^t include such areas as: 

• Measurement of Human Productivity ; i.e., continuing effort to 
develop valid measures of human performance and productivity in 
order to have meaningful criteria for evaluating performance and 
productivity adjustments caused by changes in operational 
procedures and system design concepts. 

• Critical Incident Ana lyses of Human I^ormance r i.e., 
continuing effort to investigate and understand the cause of 
"human error" in space system operations, as well as incidents 
of exceptional performance, in order to identify and classify 
the causal factors of exceptional performance, in order to 
identify and classify the causal factors and establish 
guidelines for the designing of future space systems. 

In closing this session on the human role in space, we can perhaps 
gain some perspective on the future rerearch needs by looking at the 
lessons learned in previous manned space missions. We have learned 
frcm the US and Soviet-^ sp '.ce programs to date that (1) systems can 
have indefinite operational lifetimes in space if they are designed to 
permit the comcingency of in-fli^t repair and maintenance; (2) 
struc±ures too large to be launched intact can be constructed and 
assembled on orbit, using man's unique capabilities; and (3) the 
flexibility and creative insists provided by the crew in situ 
db^S°^^^ ^^^^^ probability of successfully achieving mission 
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Reflecting x:qoon their esqperiences as crew meiribers of the Spacelab-1 
loission, Gartriott et al* (1984) sucxiinctly described their activities 
in space by describiiig three levels of crew participation in 
aocoirpli^xing the if'ssion Qbjectl\-"s. At or^ level, the space crew 
found themselves hi^ily involved in researdi activities and working 
together with priiKJipal investigators on the ground in the performance 
and real-time interpretation of research results* TSiis was the case in 
areas such as ^ce plasna physics, life sciences, and some 
materials-science and fluid-physics e>^)eriments> At another level, the 
crew found themselves perfonnii^ other technical tasks with very little 
ground interaction, lids was the case in the installation of cameras 
on a hi^-quality window or scientific airlock table and in the 
verification of their proper performance* At a third level, the 
specific e55)eriments vrere largely controlled ftm the ground with the 
space crew participating only \Aien needed to verij^ e55)eriment 
performance or to assist in malfunction analysis and correction. 

It can be anticipated that future space missions are likely to 
continue to require himaan si:?)port at each of these levels. 

TSie ability of the crew to manually assemble delicate instruments 
and ccsoiponents and to remove protective devices, such as covers, lens 
caps, etc. , means that less-ruggaJ instruments can be xised as compared 
to those formerly required to survive the hi^ launch-acceleration 
loads of lanroanned launch vehicles. As a result, corplex mechanisms 
secondary to the main purpose of the instrument will no longer need to 
be installed for removing peripheral protective devices or activating 
and calibrating instruments remotely. With the crew members a\'ailable 
to load film, for exairple, coirplex film tranf>port systems are not 
needed, and malfunctions such as film jams can be easily corrected 
manually. Ihe time required to calibrate and align instruments 
directly can be as little as l/40th of that required to do the same job 
by telemetry from a remote location. Even for pure manipulative tasks, 
experienced operators are found to take as much as ei^t times longer 
using dexterous electronic-force-reflecting servomanipulators as 
ccjtpared to performing the same tasks >>y direct contact. 

In future ^ce missions specific experiments and qperatj.ons no 
longer will need to be rigidly planned in advance, but can change as 
reqi'irements dictate. One of the greatest conti'ibutions of crews in 
scientific space missions can be in reducing the quantity of data to be 
transmitted to Earth. One second of data gathered on SEASAT, for 
exanple, required 1 hour of ground-based conpiter time for processing 
before it could be used or examined, or a value assessment made. 
Before recording and transmitting data, scientist-astronauts in situ 
could determine in real-time Whether doud cover or other factors are 
within acc^table ranges. 

Ihe astronaut can abstract data from various sources ajnd can combine 
multiple sensory inputs (e.g., visiaal, auditory, tactile) to interpret, 
understand, and take appropriate action, vAien required. In some cases 
the hviman perceptual abilitiss permit signals below noise levels to be 
detected. Man can react selectively to a large number of possible 
variables and can respond to c^mamically changing situations. He can 
qperate in the absence of carplete information. He can perform a broad 
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^pectrum of manual movement patterns, from gross positioning actions to 
hi^y refined adjustments. In this sense, he is a variable-gain servo 
system. 

3hus, with the advent of manned platforms in space, tliere are 
alternatives to the ejqjensive deploiyment of remotely manned systems, 
with their operational cceoplexity and hi^ cost of system failure, 
long-term n^titive ftmctions, routine catpitations or operations, and 
large-scale data processing functions, however, can be ej^sected to be 
performed by oaopiters capable of being programmed and serviced by 
crews in orbit, just as they are now serviced in ground installations, 
m addition, the normal functions of the terrestrial siiqp, laboratory, 
and producticai staff will find corollary activities in the work done by 
the crews manning the space platforms of the coming generation. 

Die human being r^resents a remarkably flexible and adaptable 
system. In teians of his basic capabilities and limitations, however 
we must also remember that man is essentially invariant. In terms of 
basic abilities, people will not be mch different in the year 2050 
than they are today. Recognizing this constancy in sensory, 
perc^jtual, cognitive, and psychomotor abilities, the objective of the 
proposed research programs should be to inprove system productivity 
throu^ (1) hardware, software, and other system improvements that can 
QThance human performance, and (2) procedure arid operational changes 
that will allow more effective lase of the human element in the 
Dan-machine systems of the future. 



NOTE 

1. Ihe Soviets have been reported to rely heavily on manned 

involvement in order to repair equipment and subsysliems with 
serious shortcomings in reliable and trouble-free service life. 
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SYNOPSIS OF GENERAL AUDIENCE DlSOJSSICaJ 



Follcwing the presentations by the invited ^nmposim speakers, the 
proceedings were cper^ to discussion and ccanment frm the floor, A 
sync^is of the remarks made daring this period of open discussion is 
presented below. 

St^Sien Ball, NASA Marshall Space Fli^t Center, referring to the 
apparent lack of acc^jtance of ejqoert systems by maiiy potential users 
(B^ntioned by Starbuck) asked, "Is this a imdamental limitation of 
e35)ert systems or if not, what can be done to increase potential user 
acc^-ance?" m reply William Starbuck of New York University 
su^ested that there are ways to teach p^le to trxst e:q)ert systems. 
Starbuck pointed out that there are factory scheduling programs, for 
example, that people now trust. Man/ factory schedulers use such 
programs but have no idea how they work and couldn't replicate them if 
they wanted to. After vising them for a period of time they learn to 
acc^ them. One key to acceptance is that the users learn that even 
if the oc3igputer may not be able to e5?)lain hew it derived the answers 
to a problem, it can present the solution and provide an indication of 
how cfood it thinks the answer or solution is. Over time, the 
correlation of predicted and observed results instills confidence in 
the user. 

Guilio Varsi, NASA Headquarters, suggested that not enou^ attention 
has been paid to the iirpact vMch the degree of media ej^xDsure can have 
on the acceptance and performance of space missions, ajnd raised the 
question of the degree to viiich such e:^)osure is appropriate. He cited 
the heroic image of the astronauts cheated to date. He wondered 
whether they are likely to receive this same degree of e^qDCSure in the 
future and how this ej^x^sure or lack of it may influence future 
performance. Varsi also commented on the issue of mission safety, 
pointing out that in addition to the criteria of performance and cost, 
safet/ — especially as related to human safety — should be of continuing 
concern. Varsi asked the question "As we move from the heroic to the 
routine, what is the real lev^;^ of risk we are prepared to sustain?" 
As a final po' nt, Varsi corainented that many interesting research issues 
and questions for investigation were raised during the symposium and he 
suggested that an ordering of these research issues rtould be provided, 
hi^i^ting their urgency not so much from the stanc'^int of priority 
but rather from the sequencing or logic to be follow^ad in attacking 
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these problems. He asked, "Is there any one research program sequence 
that offers a more effective path to acJdressing the critical issues 
than any other one?" 

m reply to Varsi's comments on risk adversity and safety, David 
Akin of MET pointed out that, in his experience, NASA is alreacay orders 
of itagnitude more risk adversive than the \mdersea community, and if 
ar^rthii^, NASA is beccaning even roore so in li^t of the Challenger 
accident. Akin suggested that if anything is going to drive people out 
of space entirely it is being absolutely risk free. Ihe ultimate in 
risk adversity is for himans not to go into space at all. While 
rcbotic devices may appear to ej^and the options, in reality the 
considerations of risk adversity apply to eqiiipment as well. Akin 
pointed out that in deciding to risk a one-of-a-kind $100 million 
telerobotic servicer to service a satellite with an unfired solid 
rocikBt motor, the same issues of risk adversity must be raised for the 
hardware as would be raised for the crew in a manned mission. To put 
the issue in proper perspective it is necessary to consider risks and 
risk adversity in space in relation to potential risks and risk 
adversity in other fields. 

Allen Newell of Camegie-^fellon observed that no ratter how 
dangerous it is, people believe it to be inporta7.it and still want to go 
onto space. One of the realities vMch must be faced is that by being 
so careful for the first 25 years, levels of National and World 
ej?)ectations of safety in space operations are very hi^ and as a 
Nation we will suffer from tha+- hi^ level of e^qjectation in the 
future. 

Joseph loftus of NASA Johnson Space Centsr observed that an airplane 
that is safe in peacetime is too dangerous to go to war. He pointed 
out that in an adversary relationship an airplane is needed that is at 
the peak edge of performance in order to succeed in its mission, 
loftus commented that this is an important point \;*ien thinking of space 
opeiations because space operation is not a venture in isolation—it is 
a competition. It is an ej^loration at a frontier and safety standards 
cannot be set so hi^ that the frontier is forfeited. At this point 
Session 7 of the Symposium was concluded. 
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CONCmC'ING REMARKS 
Allen Newell 



In iry view, three irajor issues emerge frcati this syirposivnti: 
1* The inerging of AI -^uid robotics. 

2. The need to consider the hman aspects of these AI-Rdbotic 
systems* 

3. The potential benefits of incorporating the socdal sciences into 
the Al-robotic researdti effort. 

Merging AI and robotics appears to be something that NASA has 
alreacfy identified as an irrportant issue. It is, in fact, one of the 
great intellectual tasks in this part of the scientific world. With 
the merging of AI and robotics, AI will finally come to deal, not just 
with the synibolic world, but with interactions with space (the space of 
three local diinensions, not NASA's outer space) : physical devices, 
movement, real tl:i^, compliance, etc. . This will radically diange the 
field of AI. It is a big step, and its success will depend upon 
developing a real tmderstanding of the nature of intelligence. 

Once AI and robotics are welded together, the concerns for the human 
aspects of these systems must be addressed along with the concerns for 
the Al-rdbotic aspects r There are three distinct reasons for conibining 
behavioral/cognitive science and Al/ccerputer science in a single 
research program. First, the field '^f cognitive science — indudii^ 
p;\Ysiological and rootor behavior, not just cognitive behavior— provide 
major clues about developing effective Al-rdbotic systems. Secora, the 
combination will allow researchers to address the concerns about 
human-conpiter interaction from several perspectives. Third, in order 
to evaluate the performance of automatic devices, much more needs to be 
known about hirnan functioning in the tasks-to-be-autcmated. Human 
perfonnance can be used as a inetric of Al-rcbotic perfonnance. 

Finally, a irove by NASA towards the social sciences, to incorporate 
them into an AI--robotic-cognitive science research program, v/culd be 
very inportant in the long run. An area that could benefit from such a 
cribination is communication— hew people use the technology to 
communicate axxi interact with that technology and with each other. In 
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this regard, the huinan--cait!puter interaction field is currently taking 
tentative steps to became much raore socially and communication 
oriented. 

let roe end with a remark about university research efforts, ihe 
xaniversities, at this moment, are in an extremely pliant ^tate with 
respect to developing cooperative efforts with external agencies. 
•Pliant", in this context, means that they are esq^loring, in a historic 
way, how to live with much deeper involvement with the industrial 
commercial and government sectors. Bie ideal of the ivy tower seems 
far away indeed, althou^ the concepts of indqjendence and objectivity 
remain solidly in place. There are real opportunities for NASA to 
mild It's research programs in ways that will benefit both NASA and 
the universities involved. 

Iramfense benefits can be garnered from long range, cooperative 
research programs established in conjunction with places like 
imiversities. A ten to fifteen year research relationship between NASA 
am a imiyersity mi^t be ejqjected to yield important dividends beyond 
the actual researxih accomplished. Ihe university researx±iers come 
automatically to think in terms of NASA and it's problems vhen 
developing (or standing) their own research programs. Graduate 
students, raised in the NASA-oriented research environment, will have 
an ingrained^ concern for NASA prdblems-and are likely to make a career 
°t if^^ witii, those types of problems. These aspects, thoucfi not the 

°^ research contracts can be made, can be of the 

• r^fr to efforts suxih as inhabiting space that stretch out 

into the far future. 
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CX5NCIIJDING REMARKS 



Thomas Sheridan 



Ihe first tiling I want to do is thank l^he speakers. Wa really 
appreciate the efforts you have put in. I also thank the organizers. 
A lot of effort went into gettirg this together. AnA I thank the 
participant:s~inary useful and interesting cxmiinents have cxsoe from the 
floor. Our job, new, is to put together a report that makes sense, is 
not self-serving, in terms of 'please. Ma, send more money", but says, 
in effec±, 'look, there are some really iirportant research issues out 
there that are not receivir^ proper attention' . 

I was taking notes, and some of my riotes have little stars to 
indicate iitportant points, for exaitple: 

Q Ihe idea of monitoring physiological state of the operator, as 
well as monitoring the cortpiter and the mechaniccil state of the 
equipnent was suggested. It seems to me that continually 
assessing the health of ^.fepth is something that we don't still 
quite knew iiow to do. 

0 Hiere were a number of issues related to the difficulties of 
defining, and measuring, system productivity. At the very 
beginnirg, Ray Nickerson, addressed these issues. Bob Williges 
insisted that performance is a relative measure. 

• Bruce Buchanan ernd Ihomas Mitchell talked about the reality of 
non-numerical rx)nstraints. AI people have known this all along, 
but some of us other engineering types haven't particularly 
appreciated the iirportance of coping with those non-numerical, 
cr qualitative, aspects of time, space, aixi resources. Ihey 
also pointed out the problems of mainta-^iing expert systems as 
situations change and new knowledge becomes available. 

ft Allen Newell characterized the trade-off between knowing versus 
searching, a priori knowledge versus getting new knowledge 
(somewhat related to the problem of optimal stopping in 
operations research). 

e Robustness was mentioned many tiir^, but we are not always clear 
what robustness inplies. 
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m We heard about the difficulties of elicitir>g (and the need for a 
better '^bedside itamer" for eliciting) knowledge for the 
construction of e^^jert systems. 

9 We also heard sca^^ questions raised about trust. I've looked in 
the literature on trust and there "ain't much there". We need 
to understand trust and transparency and that kind of thing 
vis-a-vis the relationship between intelligent systems and their 
lasers. 

e Eiiil Hayes eiDphasized the graphical interface and how basic that 
is to the way people see, think, and inake decisions. Peter 
Poison inentioned the fact that we are now able to, as the pilots 
say, "kill ourselves with kindness"— that is, provide graphic 
displays and "aids" that are so coattplicated that ndboc^^ 
understands them. Ihis certainly could happen with expert 
systems. RanSy Davis picked vp the saine point when he talked 
about designing to make understanding easier. 

0 Natural language was mentioned time and again, but it was also 
points out that it's no panacea. That there may be languages 
vAiich are not "natural", but vAiich are better for certain 
applications. 

• Baruch Fischhof f talked about the need for shared models and the 
fact that people are not very well calibrated jith respect to 
other people's questions and models of reality. 

© Wfe talked about the mechanical work, "manipulation". It also 
was pointed out that we need better models of (and notation for) 
characterizing the process of manipulation. 

• Allen Newell suggested that we need a theory of presen-r^. We 
know a little bit about the effects of fidelity in simulators 
from this point of view, but we need a much bettei' understanding 
of ^Aiat it means to feel "present". 

e Karen Cook talked about conpater-mediated communication, vMch 
we are going to have one hell of a lot more of than we have had 
in the past. We are not going to have situations vdiere people 
are holding hands; they are going to be separated, and their 
ccsraminication is going to be mediated by coirputers. Questions 
of social stress and contending objectives are going to be 
aggravated or, at least, changed ."qy cotpiter mediated 
ccQTimunication--caid by all this "non-human e55)ertise" that's 
floating around. 

© In the last session, Dave Akin raised questions about the 

paucity of our human performance database, and vdiat people can 
do relative to vtot machines can do. Harry Wolbers picked ^jp on 
the same point. 
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9 And, finally, a lovely notion, I think, inade by Bill Sta2±)uck is 
the iirportance of being playful and deviant. 

Guilio Varsi asked about prioritizing these ideas. That takes a 
great deal of v/isdoo— but we will try^. 

There is a farther comment that should be made.. NASA has been 
extremely cautious about avoiding the risk of errors in spa.ce, 
especicdly vdien human life is concerned. Ihis caution is vary 
laiadatory. Where human seifety is not an issue, hwever, there can be 
xaore ri^ taking with respect to such areas as budgetary 
considerations, testing of equipment, and studies on the allocation of 
functions between people and autamation/rdbotics to derive the best mix 
based on eirpirical evidence. 

Vfe have Scjen the evidence of this syirposium that the conpiter 
scientists and the behavioral and human factors scientists can arrive 
at a caramon ground. We believe that this interface is obvious and 
extremely inportant for mission success based on the best of both 
worlds that is siqperior to either automation or humans used alone. In 
fact, we can't believe that either one can be used alone successfully^ 
at tills time or in the future. 

In conclusion, I thank ycu all for trudging tnrou^ tlie snov and 
sleet and for your worth vdiile contributions. I'm sure that it has 
been useful for all of us. 



NOTE 

1. Ihe ideas presented by Professors Newell and Sheridan in their 
closing remarks were categorized and summarized (along with the 
"issues and research reccoranendations" presented within each paper) 
in the section titled "Assuirptions, Conclusions and 
Eecoramendations" . 
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HUAAAN FACTORS IN AITOMATED AND ROBOTIC SPACE SYSTEMS 

National Academy of Sciences 
Lecture Hall 
2101 Constitution Avenue, N.W. 
Washington, D.C 

January 29-3a 1987 

PROGRAM 



Thursday, January 29, )987_ 



S100 Registration 

9-00 Welcome and introducUon 

Thomas Sheridan. (Chair. CoHF) MIT 

Ray Colladay. Associate Administrator. Office of Aeronautics 

and Space Technology. NASA Headquaners 

Washington. D C 
David Goslia Executive Director. CBASSE. NRC 

915 Keynote Address 

-Mien Newell. Carnegie-Mellon 

9-35 Break 

9:45 Session 1 

System ProducUvity People & Machines 

Paper Raymond Nickerson. Bolt Se/anek and Newman Labs 
Discussant Roben Williges. VPI&SU 

10:45 Break 

1 1 -00 Session 2 

Expert Systems and Their Use 

Paper Thomas Mitchell, Rutgers 
Paper Bruce Buchanan, Stanford 
Discussant Allen Newell. Carnegre-Meiion 

1230 Break for Lunch 

I 30 Session 3. 

Language and Displays for Human Computer Commurncation 

Paper Phillip Hayes, Carnegie-Meiion 

Paper Peter Poison. U of Colorauo 

Discussant Judrth Reiiman Olson. U of Michigan 

3-00 Break 



3:15 Session 4 

Computer Aided Monitoring & Decision Making 

Paper Randall Davis. MIT 

Paper Baruch Fischhoff Decision Research 

Discussant William Howell, Rice 

4 45 Open Discussion 
530 Reception in Great Hc'l 

Friday, January 30, 1987 



B 30 Session 5 

Telepresence & Supervisory Control 

Paper Thomas Sheridan, MIT 

Papc' Lawrence Stark, u of California 

Discussant Antai Bejc2y, JPL 

lOOO Session 6- 

Social Factors in Productivity & Performance 

Paper Karen Cook U of Washington 
Paper H Andrew Michener U of Wisconsin 
Discussant Oscar Grusky, U of California 

1 1 30 Break for Lunch 

12 30 Session 7 

The Human Role in Space Systems 

Paper David Akin MIT 

Paper William Starbuck. New York U 

Discussant Harry Wolbers. McDonnell Douglas 

200 Concluding Remarks and Open Discussion 

Allen Ncweil Carnegie-Mellon 
Thomas Sheridan. MiT jChairj 

2 30 Adjourn 
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